Data Protection & User Rights Statement (Global / GDPR) – worldnewsstudio.com (World News Studio or WNS)

DOCUMENT CONTROL
Version: v1.0
Effective Date: 11 February 2026
Last Updated: 11 February 2026
Review Cycle: February 2027 or upon material regulatory change
Accessibility Target: WCAG 2.1 AA (with progression toward WCAG 2.2)
Applies To: worldnewsstudio.com and associated digital services

This Policy is necessarily detailed due to the global scope, legal complexity, and public-interest responsibilities of the Platform. It is written in formal governance language to ensure clarity, consistency, and reliability across jurisdictions.

This Statement must be read together with and is legally integrated into:

Terms of Service

Privacy Policy

Data Protection & User Rights Statement

Editorial Policy

Code of Ethics

Fact-Checking Policy

Corrections & Updates Policy

Community Guidelines

User-Generated Content Policy

Content Removal Policy

Notice-and-Action / Takedown Procedure

User Appeals & Review Process Policy

Platform Safety & Risk Mitigation Policy

Grievance Redressal Policy

Copyright & Intellectual Property Policy

Governing Law & Dispute Resolution

All other policy and governance documents published on worldnewsstudio.com

1. PURPOSE, VALUES, AND HUMAN RIGHTS FOUNDATION OF DATA PROTECTION

worldnewsstudio.com recognizes that personal data protection is not merely a technical compliance obligation, but a fundamental human rights responsibility closely linked to:

• Freedom of expression
• Freedom of association
• Personal dignity
• Protection from surveillance abuse
• Democratic participation

WNS affirms alignment with:

• Universal Declaration of Human Rights (Articles 12 and 19)
• International Covenant on Civil and Political Rights (ICCPR)
• UN Guiding Principles on Business and Human Rights
• OECD Privacy Guidelines
• Council of Europe Convention 108+
• African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention)
• ASEAN Framework on Personal Data Protection
• Ibero-American Data Protection Standards

Accordingly, WNS adopts this global data governance framework to ensure:

• Lawful and fair processing
• Purpose limitation and data minimization
• Security and confidentiality
• User autonomy and informed choice
• Effective remedies and accountability

All commitments herein are implemented through ongoing good-faith efforts within practical, technical, and legal constraints.

2. GLOBAL LEGAL AND REGULATORY COMPLIANCE LANDSCAPE — COUNTRY-BY-COUNTRY RECOGNITION

WNS undertakes ongoing efforts to comply with data protection and privacy laws in every region of the world, including jurisdictions with comprehensive regimes, partial sectoral laws, and emerging or fragmented protections.

2.1 Europe

• EU General Data Protection Regulation (GDPR)
• EU Digital Services Act (DSA) data governance duties
• EU ePrivacy Directive
• UK GDPR and Data Protection Act 2018
• Switzerland Federal Act on Data Protection
• Norway, Iceland, Liechtenstein (EEA)

2.2 South Asia

• India Digital Personal Data Protection Act, 2023
• Pakistan Personal Data Protection Bill (proposed)
• Bangladesh Digital Security and data rules
• Sri Lanka Personal Data Protection Act
• Nepal emerging cyber privacy frameworks
• Bhutan and Maldives sectoral privacy provisions

2.3 East Asia

• China Personal Information Protection Law (PIPL)
• China Cybersecurity Law
• China Data Security Law
• Japan Act on Protection of Personal Information (APPI)
• South Korea Personal Information Protection Act (PIPA)
• Taiwan Personal Data Protection Act
• Mongolia personal data statutes

2.4 Southeast Asia

• Singapore PDPA
• Malaysia PDPA
• Indonesia PDP Law
• Thailand PDPA
• Philippines Data Privacy Act
• Vietnam cybersecurity and privacy laws
• Cambodia data protection regulations
• Laos sectoral privacy rules
• Myanmar cyber laws

2.5 Middle East

• UAE Federal PDPL
• Saudi Arabia PDPL
• Qatar Data Protection Law
• Bahrain PDPL
• Israel Privacy Protection Law
• Turkey KVKK
• Jordan data protection law
• Oman data protection law
• Kuwait cyber and privacy statutes
• Iran cyber data regulations

2.6 Africa

• South Africa POPIA
• Nigeria NDPA and NDPR
• Kenya Data Protection Act
• Ghana Data Protection Act
• Uganda Data Protection and Privacy Act
• Rwanda data protection law
• Egypt Data Protection Law
• Morocco data protection law
• Tunisia data protection law
• Algeria privacy statutes
• Senegal data protection law
• Côte d’Ivoire data protection law
• Tanzania cyber laws
• Ethiopia digital protection rules
• Countries without comprehensive laws still covered under human rights-based privacy principles

2.7 Americas

United States (Sectoral + State Laws)

• FTC unfair practices authority
• California CPRA/CCPA
• Virginia CDPA
• Colorado Privacy Act
• Connecticut Data Privacy Act
• Utah Consumer Privacy Act
• HIPAA (health data)
• GLBA (financial data)
• COPPA (children)

Canada

• PIPEDA
• Quebec Law 25

Latin America

• Brazil LGPD
• Mexico Federal Data Protection Law
• Argentina Personal Data Protection Act
• Colombia Habeas Data Law
• Chile data protection framework
• Peru data protection law
• Ecuador privacy law
• Uruguay data protection law
• Paraguay, Bolivia, Venezuela sectoral regimes

2.8 Central Asia and Eurasia

• Kazakhstan personal data law
• Uzbekistan personal data law
• Kyrgyzstan privacy statutes
• Tajikistan data laws
• Turkmenistan cyber rules
• Armenia data protection law
• Azerbaijan personal data law
• Georgia data protection law
• Belarus personal data regulations
• Moldova privacy laws

2.9 Oceania

• Australia Privacy Act and Online Safety Act
• New Zealand Privacy Act
• Pacific island nations sectoral protections

2.10 Countries With No Comprehensive Data Protection Law

In jurisdictions where:

• No unified privacy statute exists
• Enforcement mechanisms are weak or absent

WNS still applies baseline safeguards derived from:

• International privacy principles
• Human rights law
• Platform accountability frameworks

3. DEFINITIONS AND INTERPRETATION

3.1 Personal Data

Any information relating to an identified or identifiable person, including:

• Name
• Contact details
• Online identifiers
• Device data
• Location data
• Behavioral information

3.2 Sensitive / Special Category Data

Including:

• Health data
• Biometric identifiers
• Racial or ethnic origin
• Religious beliefs
• Political opinions
• Sexual orientation

Such data is processed only where lawful and necessary.

3.3 Data Subject

Any individual whose personal data is processed by WNS.

3.4 Processing

Any operation performed on personal data, including:

• Collection
• Storage
• Use
• Disclosure
• Deletion

References in this Statement to “human rights,” “highest standards,” “heightened protections,” “ethical obligations,” or similar language are governance principles and shall not be interpreted as expanding legal duties, creating fiduciary relationships, or waiving statutory defenses beyond applicable law.

4. ROLES AND RESPONSIBILITIES IN DATA GOVERNANCE

4.1 Data Controller

Badana Communications and Business Pvt. Ltd. acts as:

• Data Controller for most processing activities

4.2 Data Processors

Third-party service providers may act as:

• Data processors under contractual safeguards

4.3 Joint Controllers

In some partnerships, WNS may be:

• Joint controller with partner platforms

Responsibilities are allocated by agreement.

5. APPOINTMENT OF STATUTORY OFFICERS

5.1 Data Protection Officer (DPO)

Where required under GDPR, PIPL, or similar laws, WNS designates:

• A Data Protection Officer

Responsible for:

• Compliance oversight
• Regulator interface
• Data subject complaints

5.2 Grievance Officer (India IT Rules)

As required by India IT Rules, 2021, WNS appoints:

• Grievance Officer
• Nodal Contact Person for law enforcement
• Compliance Officer

Contact details are published on the Platform.

5.3 Regional Representatives

Where required by law, WNS may appoint:

• EU representatives
• UK representatives
• Local compliance contacts

6. CATEGORIES OF PERSONAL DATA COLLECTED

WNS may collect:

• Identity data
• Contact data
• Account credentials
• Payment data (via secure processors)
• Device and log data
• Location approximations
• Subscription preferences
• Contribution submissions
• Customer support communications

Collection is limited to lawful purposes.

7. SOURCES OF DATA

Data may be obtained from:

• Direct user input
• Automated logging systems
• Cookies and similar technologies
• Partner platforms
• Publicly available sources (for journalism)

8. PURPOSES OF PROCESSING

Personal data is processed for:

• Account management
• Subscription fulfillment
• Content personalization
• Security and fraud prevention
• Legal compliance
• Journalism and reporting activities
• Customer support
• Analytics and service improvement

No data is processed for incompatible purposes without lawful basis.

9. LEGAL BASES FOR PROCESSING (MULTI-JURISDICTIONAL MODEL)

Depending on jurisdiction, processing may rely on:

• Consent
• Contractual necessity
• Legal obligation
• Legitimate interests
• Public interest journalism exemptions

Legal basis is documented internally.

10. JOURNALISM EXEMPTIONS AND PRESS FREEDOM BALANCE

Many data protection laws recognize exemptions for:

• Journalism
• Academic research
• Artistic expression

WNS relies on such exemptions where applicable, while still applying:

• Ethical data protection standards
• Proportionality and necessity tests

11. USER RIGHTS — GLOBAL, REGION-SPECIFIC, AND UNIVERSAL STANDARDS

worldnewsstudio.com recognizes and undertakes ongoing good-faith efforts to respect user rights arising under:

• Statutory data protection laws
• Constitutional privacy protections
• Human rights treaties
• Platform accountability standards

Where multiple regimes apply, WNS undertakes good-faith efforts to apply a level of protection consistent with applicable law and internationally recognized privacy principles, taking into account operational feasibility and jurisdictional limits.

11.1 Right of Access

Users may request confirmation of whether WNS processes their personal data and obtain:

• Categories of data
• Purposes of processing
• Data sources
• Recipients or recipient categories
• Retention periods

Recognized under:

GDPR (EU), UK GDPR, DPDP Act (India), LGPD (Brazil), PIPL (China), PDPA (Singapore, Thailand, Malaysia), POPIA (South Africa), NDPA (Nigeria), APPI (Japan), PIPA (Korea), Privacy Act (Australia, NZ), and most modern privacy regimes.

11.2 Right to Rectification / Correction

Users may request correction of:

• Inaccurate data
• Incomplete records

Including:

• Account information
• Subscription details
• Contact information

Journalistic exemptions may apply to published content, but ethical correction practices remain governed by Corrections & Updates Policy.

11.3 Right to Erasure / Deletion (“Right to Be Forgotten”)

Where legally applicable, users may request deletion of personal data where:

• Data is no longer necessary
• Consent is withdrawn
• Processing is unlawful

Subject to exceptions for:

• Legal obligations
• Freedom of expression
• Public interest journalism
• Archival purposes

11.4 Right to Restrict Processing

Users may request limitation of processing where:

• Accuracy is contested
• Processing is unlawful but deletion is opposed
• Legal claims are pending

11.5 Right to Data Portability

Where applicable, users may request:

• Structured, machine-readable copies of data they provided

Primarily applicable to:

• Account and subscription data

11.6 Right to Object

Users may object to processing based on:

• Legitimate interests
• Direct marketing
• Profiling activities

Where objections are upheld, processing is restricted unless compelling legitimate grounds exist.

11.7 Rights Regarding Automated Decision-Making

Where automated processing produces:

• Legal effects
• Significant impacts

Users may request:

• Human review
• Explanation of logic (where feasible)

WNS undertakes ongoing efforts to limit reliance on fully automated decision-making in high-impact contexts.

12. EXERCISE OF RIGHTS — PROCEDURES AND VERIFICATION

12.1 Submission Channels

Requests may be submitted through:

• Online request forms
• Email to published privacy contacts
• Grievance Redressal mechanisms

12.2 Identity Verification

To prevent fraud, WNS may require:

• Reasonable identity verification

Without collecting excessive additional data.

12.3 Response Timeframes

Response timelines vary by law, including:

• 30 days (GDPR)
• 45 days (many US state laws)
• 30 days (India DPDP Act)

Extensions may apply for complex requests.

12.4 No Discrimination for Exercising Rights

Users will not be:

• Denied services
• Charged higher prices

Solely for exercising lawful data rights, except where data is essential to service provision.

13. CONSENT MANAGEMENT AND WITHDRAWAL

13.1 Informed Consent Standards

Where consent is required, WNS applies:

• Clear language
• Granular choices
• Easy withdrawal

13.2 Withdrawal Mechanisms

Users may withdraw consent via:

• Account settings
• Cookie management tools
• Email unsubscribe links

Withdrawal does not affect lawfulness of prior processing.

13.3 Children’s Consent

Where required, parental consent mechanisms apply under:

• COPPA-aligned standards (USA)
• GDPR-K (EU)
• National child data laws

14. DATA RETENTION AND STORAGE LIMITATION

14.1 Retention Criteria

Data is retained based on:

• Purpose necessity
• Legal obligations
• Dispute resolution needs
• Security requirements

14.2 Archival and Journalism Exceptions

Published content may be retained for:

• Historical record
• Research
• Accountability

Even where user account data is deleted, subject to lawful exemptions.

14.3 Secure Deletion Practices

Where deletion is required, WNS undertakes good-faith efforts to:

• Remove from active systems
• Schedule deletion from backups where feasible

15. CROSS-BORDER DATA TRANSFERS AND INTERNATIONAL SAFEGUARDS

15.1 Global Infrastructure

Data may be processed in:

• India
• EU
• UK
• USA
• Singapore
• Japan
• Australia
• Other jurisdictions depending on service providers

15.2 Transfer Safeguards

WNS undertakes good-faith efforts to rely on:

• Standard Contractual Clauses
• UK transfer addenda
• Adequacy decisions
• Contractual and technical safeguards

15.3 Government Access Risks

WNS acknowledges that certain jurisdictions provide lawful mechanisms for governmental access to data. Where legally required, WNS may be compelled to disclose data.

Where permitted by law, WNS undertakes good-faith efforts to:

Assess the validity of requests
Seek narrowing or clarification of overbroad demands
Preserve user rights consistent with applicable law

Nothing in this section constitutes a guarantee that disclosure can always be resisted or prevented.

16. SECURITY MEASURES AND INCIDENT RESPONSE

16.1 Technical Safeguards

Including:

• Encryption
• Access controls
• Firewalls
• Monitoring systems

16.2 Organizational Measures

Including:

• Staff training
• Access limitation policies
• Incident response planning

16.3 Data Breach Notification

Where legally required, WNS will:

• Notify regulators
• Inform affected individuals

Within statutory timelines.

17. THIRD-PARTY PROCESSORS AND PARTNER CONTROLS

17.1 Categories of Processors

Including:

• Hosting providers
• Payment processors
• Email services
• Analytics providers

17.2 Contractual Protections

Processing agreements include:

• Confidentiality
• Security obligations
• Breach notification duties
• Sub-processor controls

17.3 International Vendor Risk

Vendor compliance is periodically reviewed where feasible.

18. DIRECT MARKETING, NEWSLETTERS, AND COMMUNICATIONS

18.1 Opt-In Standards

Marketing communications are sent only where:

• Consent is obtained
• Legal exceptions apply (existing customer relationship)

18.2 Unsubscribe Rights

All promotional emails include:

• Easy unsubscribe mechanisms

18.3 Analytics in Communications

Email engagement tracking is disclosed under:

• Cookies Policy
• Newsletter Signup Policy

19. PLATFORM SAFETY, ABUSE PREVENTION, AND DATA USE

19.1 Fraud and Abuse Detection

Data may be processed to:

• Prevent bots
• Detect spam
• Protect platform integrity

19.2 Legal Compliance Disclosures

Data may be disclosed to:

• Courts
• Regulators
• Law enforcement

Where legally required and subject to due process.

20. GOOD-FAITH DUTY OF CARE AND LIMITATIONS

WNS recognizes professional and regulatory obligations to:

Protect personal data
Respect user privacy
Apply risk-based safeguards

Accordingly, WNS undertakes proportionate, reasonable, and good-faith efforts to improve safeguards, update compliance practices, and respond to emerging risks.

These commitments reflect governance standards and do not create fiduciary duties, strict liability, or guarantees of absolute data security.

21. CHILDREN’S DATA PROTECTION AND AGE-SENSITIVE PROCESSING

21.1 Global Child Privacy Standards

WNS recognizes heightened protections for children under laws including but not limited to:

• COPPA (United States)
• GDPR-K (European Union)
• UK Age-Appropriate Design Code
• India IT Rules and DPDP Act child provisions
• China PIPL minor protection rules
• Brazil LGPD child data provisions
• Australia Online Safety Act
• South Africa POPIA child data safeguards
• Nigeria NDPA child protections
• ASEAN child data guidelines

21.2 Principles Applied to Children’s Data

WNS undertakes ongoing good-faith efforts to:

• Minimize collection of children’s data
• Avoid behavioral advertising to minors
• Apply age-appropriate defaults
• Restrict profiling of minors

21.3 Parental Consent and Verification

Where legally required, WNS may implement:

• Parental consent mechanisms
• Age-gating controls

However, WNS cannot guarantee perfect age verification due to:

• Limitations of online identity systems
• Cross-border jurisdictional constraints

21.4 Educational and Youth Content

Where content is designed for minors:

• Advertising restrictions apply
• Data collection is minimized
• No sale of data occurs

22. JOURNALISM EXEMPTIONS, PUBLIC INTEREST, AND DATA PROTECTION BALANCING

22.1 Legal Recognition of Journalism Exemptions

Many jurisdictions provide exemptions for:

• Journalism
• Academic research
• Artistic expression

Including under:

GDPR, UK GDPR, India DPDP Act, LGPD (Brazil), PIPL (China), POPIA (South Africa), NDPA (Nigeria), APPI (Japan), PIPA (Korea), and others.

22.2 Public Interest Test

WNS evaluates whether processing is:

• Necessary for informing the public
• Proportionate to privacy intrusion

Particularly in cases involving:

• Public officials
• Corporate misconduct
• Human rights violations

22.3 Ethical Safeguards Beyond Legal Minimums

Even where exemptions apply, WNS applies:

• Source protection
• Redaction of unnecessary personal data
• Trauma-sensitive reporting standards

23. GOVERNMENT REQUESTS, SURVEILLANCE, AND TRANSPARENCY

23.1 Lawful Requests

WNS may receive requests from:

• Courts
• Regulators
• Law enforcement agencies

Requests are evaluated for:

• Legal validity
• Jurisdictional authority
• Due process compliance

23.2 Resistance to Unlawful Demands

Where legally permitted, WNS may:

• Challenge overbroad requests
• Seek clarification or narrowing

23.3 Transparency Reporting

WNS may disclose aggregate data about:

• Government data requests
• Content takedown orders

Subject to:

• Legal gag orders
• National security restrictions

24. AI, PROFILING, AND ALGORITHMIC ACCOUNTABILITY

24.1 Use of Automated Systems

WNS may use algorithms for:

• Content recommendation
• Moderation assistance
• Analytics and trend detection

24.2 Limits on Profiling

WNS undertakes good-faith efforts to avoid:

• Intrusive behavioral profiling
• Political microtargeting
• Discriminatory algorithmic outcomes

24.3 Human Oversight

High-impact decisions affecting:

• Content visibility
• Account status
• Safety actions

Are subject to human review where feasible.

24.4 AI Governance Principles

WNS aligns with:

• OECD AI Principles
• UNESCO AI Ethics Recommendations
• Emerging AI regulations (EU AI Act, China AI governance rules, US state AI frameworks)

25. DATA SHARING, DISCLOSURE, AND COMMERCIAL PARTNERS

25.1 No Sale of Personal Data in Sensitive Categories

WNS does not knowingly sell:

• Sensitive personal data
• Children’s personal data

25.2 Advertising and Analytics Partners

Limited data may be shared with:

• Ad networks
• Measurement providers

Under contractual and technical safeguards and subject to consent where required.

25.3 Corporate Transactions

In case of:

• Merger
• Acquisition
• Asset transfer

Personal data may be transferred subject to:

• Continuity of privacy protections
• User notification where required

26. DATA LOCALIZATION AND SOVEREIGNTY REQUIREMENTS

26.1 Countries With Localization Laws

Some countries require:

• Local storage or processing

Including but not limited to:

China, Russia, Vietnam, Indonesia, Turkey, Saudi Arabia, UAE (sector-specific and regulatory-dependent), and certain other jurisdictions.

26.2 Compliance Approach

WNS undertakes good-faith efforts to:

• Configure regional data hosting
• Apply hybrid storage models

Where required by law and commercially feasible.

27. DATA PROTECTION IMPACT ASSESSMENTS (DPIAs) AND RISK EVALUATION

27.1 High-Risk Processing Activities

DPIAs may be conducted for:

• New tracking technologies
• Biometric data use
• Large-scale profiling

27.2 Mitigation Measures

Risk controls may include:

• Data minimization
• Anonymization
• Access restrictions

Where feasible, anonymization or irreversible aggregation is preferred over identifiable data processing.

28. TRAINING, INTERNAL CONTROLS, AND CORPORATE ACCOUNTABILITY

28.1 Staff Awareness Programs

Employees receive training on:

• Privacy obligations
• Secure handling of data
• Incident reporting

28.2 Internal Audits

Periodic audits may review:

• Compliance with policies
• Vendor practices

28.3 Board and Executive Oversight

Data protection may be reported to:

• Senior management
• Board committees

As part of enterprise risk management.

29. COMPLAINTS, DISPUTE RESOLUTION, AND REGULATOR ENGAGEMENT

29.1 Complaint Channels

Users may submit complaints via:

• Privacy contact email
• Grievance Redressal Policy channels

29.2 Regulator Complaints

Users may lodge complaints with:

• National data protection authorities

In their country of residence.

29.3 Cooperation With Regulators

WNS cooperates with:

• Lawful investigations
• Compliance inquiries

Subject to legal protections and due process.

30. LIMITATIONS OF SECURITY AND REALISTIC EXPECTATIONS

While WNS applies reasonable safeguards, no digital system can guarantee:

• Absolute security
• Immunity from cyber attacks
• Prevention of all data breaches

Accordingly, WNS commits to:

• Risk-based security management
• Prompt response to incidents
• Continuous improvement

But disclaims absolute guarantees of safety.

Security controls are implemented on a risk-based basis and may evolve over time. No representation is made that security measures are infallible or immune from circumvention.

31. SEVERABILITY, NON-WAIVER, AND SURVIVAL

31.1 Severability

If any provision is found unenforceable:

• Remaining provisions remain effective

31.2 Non-Waiver

Failure to enforce rights does not constitute waiver.

31.3 Survival

Data protection obligations survive:

• Account termination
• Service cessation

Where legally required.

32. POLICY UPDATES AND NOTICE OF CHANGES

32.1 Right to Amend

WNS may update this Statement to reflect:

• Legal reforms
• Regulatory guidance
• Technology changes

32.2 Notification

Where required by law, notice will be provided via:

• Website posting
• Email
• In-app notifications

Continued use constitutes acceptance.

33. FINAL COMMITMENT TO PRIVACY AS A PUBLIC TRUST

worldnewsstudio.com affirms that:

• Trust is central to journalism
• Privacy protection strengthens democratic participation
• Ethical data governance supports free expression

This Statement reflects WNS’s commitment to:

• Lawful compliance
• Ethical responsibility
• Global human rights standards

Through ongoing good-faith efforts, not absolute guarantees.

34. GOVERNING LAW AND EXCLUSIVE JURISDICTION (FINAL CLAUSE)

This Data Protection & User Rights Statement and all matters arising from it shall be governed by the laws of India.

Subject to mandatory protections under applicable foreign laws, all disputes, claims, or proceedings shall be subject to the exclusive jurisdiction of courts located at Srinagar, Jammu & Kashmir, India, and no other forum shall have jurisdiction.

Nothing in this clause limits non-waivable rights granted to data subjects under applicable foreign data protection laws.

Contact & Official Communication

Primary Contact Officer
Akhtar Badana
info@worldnewsstudio.com

Phone: +91-9419061646

Correspondence & PR Office
1st Floor, Bhat Complex
Near Astan, Airport Road
Humhama, Srinagar – 190021
Jammu & Kashmir, India

Editorial & Media: editor@worldnewsstudio.com

Grievances: grievances@worldnewsstudio.com

Legal, privacy & Compliance: legal@worldnewsstudio.com

Advertising: advertise@worldnewsstudio.com

Editorial correspondence does not substitute for formal legal or grievance submissions. Grievance submissions are subject to preliminary review for completeness prior to formal registration.