Legal Register
Control Workpaper
OBL-01 Section 3(a), (b), (c) ACT-3

OBL-01: Processing Scope & Territorial Perimeter

Verifies digital personal data processing within India and offshore goods/services nexus.

Statutory scope: Section 3(a), (b), (c) · Assigned to Legal / activity owner · Systems: Core Lending Monolith & Transaction Store (SYS-002); Enterprise Cloud Data Warehouse (SYS-004)

Operational Interface Requirement

Recommended interface: Remove a required scope/ground/exemption fact; expected outcome is review or stop, not inherited permission.

Expected Audit Assertion / Test Result

Remove a required scope/ground/exemption fact; expected outcome is review or stop, not inherited permission.

Governance & Architecture

Recommended Activity Owner
Legal / activity owner
Target Systems & Interfaces

Verification Specification & Workpaper

Proposed Test Specimen ID
SPEC-Q10-OBL-01

proposed per-row review/acceptance specification; not a claim of executed statutory coverage

Populated Teaching Workpaper
out/dossier/CASE-001/purpose-decisions.json

populated hypothetical decision/specimen; not actual enterprise execution

Local Execution Reference
out/dossier/CASE-001/tests/results.json

Canonical Statutory Grounding

Source references verified against the official Gazette of India publication baseline.

ACT-3 Lines 135–157
Commencement: 2027-05-13 (scheduled, not yet operative)
Obligated Actor

Person processing digital personal data

Trigger Context

India processing or offshore goods/services connection

Statutory Conditions

Includes later-digitised collection; offshore nexus is principals within India, not Indian citizenship.

Statutory Exceptions

Individual personal/domestic use; principal-made public data or legally obliged publication by another.