OBL-02: Statutory Roles & Entity Classification

Determines activity-specific roles: Data Fiduciary, Data Processor, or Data Principal.

Statutory scope: Section 2 (Definitions) · Assigned to Legal / activity owner · Systems: Core Lending Monolith & Transaction Store (SYS-002); Enterprise Cloud Data Warehouse (SYS-004)

Operational Interface Requirement

Recommended interface: Remove a required scope/ground/exemption fact; expected outcome is review or stop, not inherited permission.

Expected Audit Assertion / Test Result

Remove a required scope/ground/exemption fact; expected outcome is review or stop, not inherited permission.

Governance & Architecture

Recommended Activity Owner

Legal / activity owner

Target Systems & Interfaces

Core Lending Monolith & Transaction StoreSYS-002 Enterprise Cloud Data WarehouseSYS-004

Mechanism Chapter

Chapter 3 — Scope, Roles, Exemptions and Processing Grounds

Verification Specification & Workpaper

Proposed Test Specimen ID

SPEC-Q10-OBL-02

proposed per-row review/acceptance specification; not a claim of executed statutory coverage

Populated Teaching Workpaper

out/dossier/CASE-001/purpose-decisions.json

populated hypothetical decision/specimen; not actual enterprise execution

Local Execution Reference

out/dossier/CASE-001/tests/results.json

Canonical Statutory Grounding

Source references verified against the official Gazette of India publication baseline.

ACT-2 Lines 52–134

Commencement: 2025-11-13 (in force)

Obligated Actor

All statutory actors

Trigger Context

Interpretation of defined terms

Statutory Conditions

Child: below 18; fiduciary: alone or jointly determines purpose and means; processor: acts on behalf; breach: CIA-compromising unauthorised processing or specified accidental events.

Statutory Exceptions

Unless context otherwise requires.

View Official Gazette Document

Back to Control Master Matrix View Canonical Provision Register