Industries · Telecom and digital platforms
Millions of users, one standard for how each is treated
A telecom operator, an OTT service or a social app holds data on a very large number of people, and much of it is generated as people use the service: call records, viewing history, location, device logs. Requests, complaints and breaches all arrive at scale, and some large platforms fall within the Rules' inactivity erasure duty.
What you hold
The personal data in a typical week
The register every duty starts from. In TrustOS each category is linked to the systems that hold it, the purposes it serves and an owner.
Data register · Telecom and digital platforms6 categories
- Subscriber and account details
- Call detail records and usage logs
- Location and network data
- Viewing, listening or browsing history
- Payment and billing records
- Customer care call recordings and chats
Pressure points
Where the DPDP Act bites in telecom and digital platforms
Requests at a scale no inbox can handle
Even a small share of users exercising their rights can mean thousands of requests a month, each needing identity checks, routing and a reply on time.
Inactive accounts
The Rules require certain large e-commerce, online gaming and social media platforms above set user thresholds to erase data after three years of user inactivity, with at least 48 hours' notice. You need to know if you are in that class and, if so, run it as a routine job.
Usage data that feeds advertising
Behaviour data used for ad targeting needs a clear purpose and ground, and must not be used to track or target children.
Being named a Significant Data Fiduciary
The Central Government can notify large platforms as Significant Data Fiduciaries. That brings a DPO based in India, an independent data audit, yearly impact assessments and checks on algorithmic software.
How TrustOS helps
The modules that matter most here
Queue requests by type and due date, assign them to teams, and see which ones are close to breaching your timelines.
Schedule inactivity checks, send the advance notice to the user, and record the erasure that follows.
Search for a subscriber across billing, CRM and analytics stores, and confirm each erasure or correction where it is done.
Run Data Protection Impact Assessments and algorithmic system risk reviews, and keep them ready for an independent auditor.
What it looks like in TrustOS · sample data
An example scenario
Illustrative example: inactive accounts on a streaming app
Suppose a streaming platform confirms with counsel that the inactivity rule applies to it. In this hypothetical, TrustOS runs a monthly check against the user store, sends the advance notice by email, waits the notice period, and raises erasure tasks for accounts where the user has not logged back in. Each step is logged.
Rules that sit alongside the Act
- Telecommunications Act, 2023 and the rules made under it
- DoT licence conditions on subscriber data
- TRAI regulations on unsolicited commercial communication
- CERT-In directions on reporting cyber incidents
TrustOS helps you keep these obligations in the same record. Your counsel decides how they apply to you.
Questions
From telecom and digital platforms teams
How do we know if we are a Significant Data Fiduciary?
The Central Government notifies Significant Data Fiduciaries. Until a notification names you or your class, you are not one, though large platforms often prepare early. TrustOS can track those additional duties either way.
Can TrustOS handle our request volume?
It is built to queue, assign and track requests in bulk. For very high volumes, sizing is part of the deployment plan, and we agree it with your technology team.
Is the inactivity erasure rule the same for everyone?
No. It applies only to the classes of platforms and user thresholds set out in the Rules. Check with counsel whether it covers you before you switch it on.
For telecom and digital platforms teams
See TrustOS run on telecom and digital platforms data
Bring the systems that hold your subscriber and account details, and the requests your team handles today. We will show the work moving through TrustOS, from the first request to the evidence.
Or get a rollout proposal in two minutes- Step 1A 30 minute demo on Google MeetWith someone who knows the Act and the product.
- Step 2Your systems and purposesWe walk one product's personal data through TrustOS.
- Step 3A first phase you can planModules, owners and effort, written down for you to keep.