Challenges In Corporate Governance In The Implementation Of GDPR For IT Start-Up Companies In India

Abstract

There is a huge growth of start-ups in India, and they have tried to diversify themselves
in different businesses. Because of its flat structure, it is difficult for them to enforce the GDPR,
and the data processed by it is not covered as mandated by the regulation either due to the high
cost of compliance or due to changes in the governance of the company. This research focusses
on what are the various challenges Indian IT start-ups face when implementing GDPR on their
governance, the reasons Indian start-ups are investing in compliances for these data regulations,
information security standard which act as a backbone for the implementation of GDPR and the
various aspects of governance in which the IT start-up needs to reform itself. The data gathered
for research was through interviews, surveys, and companies' reports. The main findings of the
research have shown that Employee awareness training is the most critical obstacle for the startup
and have identified certain information security standards that allow the organization to
comply with GDPR.