Data protection, privacy compliance, and data subject rights management for GDPR and India DPDP Act.
All data encrypted using AES-256 with KMS-managed keys and automatic rotation
TLS 1.2+ enforced on all connections. No unencrypted data transmission
Row-level security ensures one tenant can never access another tenant's data
Only collect and store data that is necessary for the stated purpose
TalentOS supports all GDPR and India DPDP data subject rights:
| Right | Implementation | Timeline |
|---|---|---|
| Right to Access | Export all personal data as JSON/CSV | Within 24 hours |
| Right to Correction | Self-service profile editing + admin correction | Immediate |
| Right to Erasure | Complete data deletion with tombstone markers | Within 72 hours |
| Right to Portability | Standard format data export | Within 24 hours |
| Consent Management | Granular consent tracking per data use purpose | Real-time |