eService Delivery and Transformation Division (eSDT)

National Informatics Centre
Ministry of Electronics & Information Technology, Government of India
A Block, CGO Complex, Lodhi Road, New Delhi-110 003.
support[dot]serviceplus[at]gmail[dot]com
https://serviceonline.gov.in

The Government will have complete discretion to share the details of your use of the Web Site and/ or data entered by you with regulators or with any other third party, or in order to resolve disputes or complaints which relate to the Web Site.

All right are reserved @ 2022

ServicePlus, on behalf of Service Owner Department,provides only the facility for transacting with Government Offices through the Internet. The service delivery is subject to the acts and rules promulgated by the respective Government from time to time. Electronic delivery of Government services are in compliance with the IT act 2000. The special conditions and the terms of service applicable to Internet delivery are detailed in this document.
The following terms and conditions will apply if you wish to use the Internet for availing a service. Please go through the conditions carefully and if you accept them, you may register yourself and transact on the site. On using this site for service delivery, you are deemed to have agreed to the terms and conditions set forth below. If You do not agree with all these terms and conditions, you must not transact on this Website.

If a user violates the terms and conditions Government (service owner) reserves the right to deactivate all such user registration and cancel any or all services requested without any notice. Garbage / Junk values in profile may lead to Deactivation.

Operationalization of this agreement is subject to existing laws and legal processes of the respective Government, and nothing contained in this agreement is in derogation of Government's right to comply with law enforcement requests or requirements relating to your use of this Web Site or information provided to or gathered by this site with respect to such use. You agree that Government may provide details of your use of the Web Site to regulators or police or to any other third party, or in order to resolve disputes or complaints which relate to the Web Site, at Governmentâs complete discretion.

This agreement is made between: respective service owner department of the respective government who has configured the serviceGovernment (âUsâ) and The User (âYouâ), the individual, whose details are set out in the Portal User Creation page.

Payment Option

The list of payment options available are internet banking /debit card payment / credit card payment from banks that are listed when selecting each of the above options. Apart from the fee chargeable to Government against each service, bank / payment gateway transaction charges will be applicable extra. In case of a failed transaction the user shall have no right to claim the amount. The loss on this account shall not be borne either by Government or by the Banks /Payment Gateways.

User Creation

You are responsible for maintaining the confidentiality of the password and account, and are fully responsible for all activities that occur under your password or account. Complaints Procedure
You can reach us on the contact details given in the âContactsâ link given in the login page.
Your obligations

General Obligations:

You shall access ServicePlus web site only for lawful purposes and you shall be responsible for complying with all applicable laws, statutes and regulations in connection with the use of Government web site. This Website is for your personal or commercial use by approved kiosks. You shall not modify, copy, distribute, transmit, display, perform, reproduce, publish, license, create derivative works from, transfer or sell any information, or services obtained from this Website. You shall not create a hypertext link to the Website or "frame" the Website, except with the express advance written permission of the Government.

Information Provided

The information you provide in the Registration page must be complete and accurate. Government 00. reserves the right at all times to disclose any information as deems necessary to satisfy any applicable law, regulation, legal process.

Termination

We may at any time at our sole discretion and without giving any reason or any prior notice terminate or temporarily suspend your access to all or any part of the web site.

Submitted applications will be processed only after successful transaction has been done with the payment gateway. In case of a failed transaction the user shall have no right to claim the amount However, cancellation/refund policy for a service will be governed solely on the basis of applicable rules and regulations of the service as defined by department/agency owning the service.

Introduction

ServicePlus is committed to complying with the Digital Personal Data Protection Bill 2023 and safeguarding the personal data processed on its Low Code No Code platform. This policy outlines the responsibilities of ServicePlus, the Instance Owner, Service Definers, Department Admins and the workflow players in ensuring adherence to the DPDP Bill 2023.

These measures aim to establish a robust framework within ServicePlus to protect personal data while optimizing its functionalities.

ServicePlus Responsibilities

ServicePlus acknowledges its responsibility for modules such as user creation, Aadhaar data handling, and other common functionalities. In compliance with the DPDP Bill 2023, ServicePlus will:

- Implement robust security measures to protect personal data collected through modules such as user creation, Aadhaar data handling, and other common functionalities against unauthorized access, disclosure, alteration, or destruction.

- Regularly update and maintain security protocols to align with the evolving standards outlined in the DPDP Bill 2023.

- Conduct periodic assessments and audits to ensure compliance with data protection regulations.

- Provide necessary training and guidelines to Service Definers, Department Admins, and Workflow Players on data protection best practices.

Service Definer and Department Admin Responsibilities

In scenarios related to service data defined by Service Definers and managed by Department Admins:

Service Definers are responsible for:

- Ensuring that services created on ServicePlus comply with the DPDP Bill 2023.

- Implementing appropriate measures within their service modules to protect personal data at the front end.

- Conducting necessary assessments to identify and mitigate potential data protection risks within their defined services.

Department Admins are responsible for:

- Overseeing service-related data within their respective departments.

- Collaborating with Service Definers to ensure compliance with the DPDP Bill 2023.

- Enforcing data protection measures within their department's services and workflows.

Data Protection Measures

ServicePlus Framework must adhere to the following measures to protect personal data:

1. Data Minimization: Limit the collection and processing of personal data to only what is essential for user authentication and authorization purposes within ServicePlus.

2. Security Protocols: Implement robust encryption, stringent access controls, and authentication mechanisms to fortify the protection of personal data stored or transmitted through ServicePlus. This measure is limited to the pre-identified data sets collected/facilitated by the ServicePlus framework.

3. User Consent: Prioritize obtaining explicit and informed consent from users before gathering or processing any personal information necessary for user authentication or authorization.

4. Data Integrity: Maintain the accuracy, relevance, and completeness of personal data stored on the ServicePlus platform during user account creation and subsequent usage.

5. Incident Response: Develop and enact comprehensive procedures to swiftly address, manage, and report any data breaches or security incidents that may occur within the ServicePlus infrastructure.

Service Definers, and Department Admins must adhere to the following measures to protect personal data:

1. Data Minimization: Service Definers and Department Admins should limit the collection and processing of personal data to only what is essential for efficient application processing.

2. User Consent: Prioritize seeking explicit consent from users before collecting or processing their personal information, ensuring compliance with the Digital Personal Data Protection Bill.

3. Data Integrity: Maintain a strict protocol to ensure the accuracy, relevance, and completeness of the personal data collected and stored within ServicePlus.

4. Masked Document Collection: If documents containing personal data are required for application processing, ensure that such documents are gathered and stored in a masked or encrypted form. This precaution aims to prevent the inadvertent disclosure of personal data when accessed by the workflow player.

Compliance and Enforcement

Failure to comply with the DPDP Bill 2023 by ServicePlus, Service Definers, Department Admins or Workflow Players may result in disciplinary actions, including but not limited to, suspension of service, termination of access, or legal consequences as per applicable laws and regulations.

Review and Updates

This policy will be subject to periodic reviews and updates to align with changes in the DPDP Bill 2023 or any other relevant data protection legislation. ServicePlus will communicate any amendments to all stakeholders.

By adhering to this policy, ServicePlus aims to create a secure and compliant environment for handling personal data in line with the DPDP Bill 2023.

This policy is effective from the date of publication.