Data Protection

• Karyakarta: their own records and intake links.
• Reviewer: records in their zones; may approve or reject; may record eligibility only with the approver permission.
• Eligibility approver: a permission on a reviewer account.
• Grievance officer: a permission an administrator can give to a reviewer, eligibility approver or administrator account. It opens grievance records only.
• Administrator: summaries, settings, team, audit, exports, and full identifiers after a password re-check.

Every role or permission change is made by an administrator and written to the audit trail. Access is enforced on the server for every request, not only by hiding menu items.

Voter ID and driving licence numbers are encrypted at rest, shown masked (last four characters) in every screen, file and export, and revealed in full only to an administrator, for one minute, after re-entering their password. Unmasked exports need an administrator, the password, a stated purpose and a confirmation; the file hash is recorded. Identifiers and passwords are never written to logs.

A formal audit trail (append-only in the database) records sign-ins, consent, decisions, exports, reveals, denied access and configuration changes with a server time and request ID. Operational logs are separate and carry no personal data. Access to audit records is itself recorded. These controls reduce the chance of undetected change; the audit trail is not claimed to be tamper-proof against someone with full database administrator access.

Backups are taken before changes and restore tests are run. The data-encryption key is held separately from the database.

गोपनीयता या डेटा से जुड़े किसी भी प्रश्न के लिए लिखें: bbs.indore1984@gmail.com

शिकायत अधिकारी · Grievance Officer: श्री राजेश शुक्ला (Shri Rajesh Shukla) · 9589582020 — विवरण: शिकायत एवं आपत्ति

कार्यालय · Office: बावीसा ब्राह्मण समाज, इंदौर (पंजीकृत), पंजीयन क्रमांक 14341/1984, 114, आडा बाजार (पंढरीनाथ पथ), इंदौर – 452 004