The Legal Register Row Checklist

Quality control checklist validating the completeness, metadata accuracy, and auditability of every row in the Canonical Legal Register.

Statutory Source: Ch. 2 §4: provision, instrument, source+SHA-256, effective date, status, applicability, control link, review date

Total Verification Points: 6 Audit Checks

C-10Ch. 2 §4: provision, instrument, source+SHA-256, effective date, status, applicability, control link, review date

The Legal Register Row Checklist

Build-your-own-register starter (the template is LEGAL_REGISTER_TEMPLATE.csv)

Readiness Score

0 / 6 checks

Exact Statutory Citation: Standardized alphanumeric provision code (e.g. s.8(5), r.6(1), GSR 843(E)).

Chapter 2

Source Instrument & Gazette Reference: Primary Act or Subordinate Rule with official gazette publication date.

Chapter 2

Cryptographic Checksum: SHA-256 hash of the authoritative legal text passage recorded to prevent drift.

Chapter 2

Commencement Tranche Badge: Correct temporal assignment (Tranche 1 Nov 2025, Tranche 2 Nov 2026, Tranche 3 May 2027).

GSR 843(E)

Statutory Actor Assignment: Clearly identified statutory role (Data Fiduciary, Processor, SDF, Principal, Board).

Section 2

Control Matrix Linkage: Direct mapping to one or more operational controls in the 54 OBL Master Matrix.

Appendix B

State automatically persisted in browser localStorage

Statutory Grounding & Legal Perimeter

Mandatory statutory clauses, rules, and gazette requirements enforceable under this checklist.

Enforceable Provisions:

Section 1(2)

Section 2

Section 40

Statutory Context:

This checklist is directly anchored in Ch. 2 §4: provision, instrument, source+SHA-256, effective date, status, applicability, control link, review date. Failure to maintain verifiable affirmative proof of compliance exposes the enterprise to severe adjudication penalties under Section 33 (Schedule) of the DPDP Act.

Target Architecture & Impacted Systems

Enterprise applications, stores, and integration surfaces evaluated by this checklist.

View Full Systems Topology (SYS-001..014) →

In-Scope System Nodes:

SYS-010 Architecture Spec →

Consent Ledger & Policy Decision Point

Immutable consent event store and Policy Decision Point issuing authority tokens

Associated Operational Controls (54 OBLs)

Control Master Matrix obligations directly tested by this checklist.

Open Control Matrix →

OBL-01 Workpaper →

Control Dossier OBL-01

OBL-02 Workpaper →

Control Dossier OBL-02

Audit & Implementation Guidance

Best practices for establishing evidence, avoiding traps, and conducting periodic assurance.

Evidence Retention Standard

Do not rely solely on policy documents or statements of intent. Ensure verifiable evidence artifacts (cryptographic logs, test manifests, signed DPA agreements, or automated crawler receipts) are archived for at least 1 year.

Common Implementation Trap

Avoid declaring compliance based on frontend UI alone. The Data Protection Board evaluates the full data pipeline, including database persistence, read replicas, cache invalidation, and third-party processor synchronization.

Previous Checklist

C-09 — The Full Compliance Calendar Checklist

Next Checklist

C-11 — The Rights Request Response Checklist