BRICS ARTIST REGISTRY
Home Artist Directory Data Policy
BRICS ARTIST REGISTRY

Data Policy & Security Standards

Information on how data in the BRICS Artist Registry is governed, protected and handled during the pilot phase.

8 Data Policy

The BRICS Artist Registry operates as a multilateral platform. Data governance will be guided by the applicable legal and regulatory framework of the participating countries.

  • The Information Technology Act, 2000 and amendments of India, as the hosting nation for the pilot.
  • The Digital Personal Data Protection Act, 2023 of India for personal data of Indian registrants.
  • National data protection laws of each BRICS state for their respective citizens.
Data sovereignty: Data pertaining to citizens of each Member State remains subject to that country's national data protection laws.

8.1 Data Security Standards

The Registry applies security measures to protect personal data collected through the platform and to safeguard information throughout its handling and storage.

01

Encryption in Transit

All personal data collected shall be encrypted in transit.

02

Encryption at Rest

All personal data collected shall be encrypted at rest.

03

Secure Server Software

Secure server software shall encrypt information before it is sent to the Registry.

04

No Unauthorised Third-Party Sharing

Personal information shall not be shared with any third-party department or organisation without the explicit consent of the registrant.

8.2 Privacy & User Rights

The Registry is designed to limit the use of personal information and provide registrants with control over their information.

Limited User Identification The website will not identify users or their browsing activities except when required by a court order or law enforcement warrant.
Right to Request Deletion Registrants may request deletion of their personal data at any time by writing to the Nodal Agency.
Website Visit Data The website will record visit data such as server address, browser type, date and time for statistical purposes only.
Consent-based Sharing Personal information is not to be shared with third parties without the explicit consent of the registrant.

A Public & Private Information

The framework provides that information collected through the Registry may be categorised as public or private.

Member State determination: Each Member State determines which information may be made publicly accessible through the database and which information should remain confidential and be used solely for administrative purposes.

Accordingly, the public artist profile should contain only the information approved for public display by the relevant participating country.

9 What the Registry Will Not Do

Registration in the Registry should not be interpreted as accreditation, certification, employment or an assurance of opportunities.

  • Does not guarantee employment.
  • Does not guarantee selection for a festival or programme.
  • Does not constitute government accreditation unless separately specified.
  • Does not constitute a professional licence.
  • Does not guarantee funding.
  • Does not certify the quality of an artist's work.
  • Does not transfer ownership of copyright or artistic works.
  • Does not constitute endorsement of an artist by all BRICS countries.
Important: The Registry is a voluntary directory and should not inadvertently become an accreditation or certification system.

10 Contact Nodal Agency

For the pilot phase, the Registry will be hosted by the Ministry of Culture, Government of India.

Nodal Agency Coordination

Nodal Agencies, once appointed by each participating State, will coordinate complaints, misuse, malfunction and other issues pertaining to the website with the Ministry of Culture, Government of India.