Data Disclosure & Due Diligence Policy

1. Data Disclosure Principles

GBRP Medical Institute follows strict data disclosure standards:

• Disclosure only on a need-to-know basis
• Disclosure only with user consent or legal obligation
• No commercial sale of personal data

2. Due Diligence Measures

We ensure:

• Verification of placement partners
• Compliance checks before data sharing
• Secure data transfer protocols
• Staff confidentiality agreements

3. Legal Disclosure

Data may be disclosed without prior notice if required by:

• Court orders
• Government authorities
• Law enforcement agencies

4. Data Retention

• Student records are retained as per statutory requirements
• Data is securely deleted once the retention period ends

5. Breach Management

In the event of a data breach:

• Immediate containment measures will be taken
• Affected users will be notified as required by law

6. Grievance Officer

As per Indian IT rules, the Grievance Officer details are as follows: