Cross-Border Transfer
Description
Cross-border transfers permitted only to countries notified by Central Government.
⚠️ Risk Impact
DPDP allows Central Government to restrict transfers to specific countries. Companies must track destination + obtain transfers approval.
🔍 How EchelonGraph Detects This
EchelonGraph's Tier 1 Cloud Scanner automatically checks for this condition across all connected cloud accounts. Violations are flagged as high-severity findings with remediation guidance.
🔧 Remediation
Map cross-border data flows. Document destinations. Track Central Government notifications. Maintain ability to suspend transfers.
💀 Real-World Attack Scenario
A SaaS used a US cloud provider for Indian customer data. When Central Government issued restriction on transfers to certain countries, the company had no immediate mechanism to suspend.
💰 Cost of Non-Compliance
Transfer violations: ₹50-₹150 crore.
📋 Audit Questions
- 1.Cross-border flow map?
- 2.Current notification status tracked?
- 3.Suspension capability?
⚡ Common Pitfalls
- ⛔No tracking of Central Government notifications
- ⛔Transfers without suspension capability
📈 Business Value
Compliant transfers enable India operations.
⏱️ Effort Estimate
Flow mapping + governance
EchelonGraph tracks cloud regions vs data flows
🔗 Cross-Framework References
Automate DPDP Act DPDP-9 compliance
EchelonGraph continuously monitors this control across all your cloud accounts.
Start Free →