OBL-03: Lawful Grounds for Processing

Asserts valid consent or statutory Section 7 legitimate use before processing.

Statutory scope: Section 4 (Grounds) · Assigned to Legal / activity owner · Systems: Core Lending Monolith & Transaction Store (SYS-002); Enterprise Cloud Data Warehouse (SYS-004)

Operational Interface Requirement

Recommended interface: Remove a required scope/ground/exemption fact; expected outcome is review or stop, not inherited permission.

Expected Audit Assertion / Test Result

Remove a required scope/ground/exemption fact; expected outcome is review or stop, not inherited permission.

Governance & Architecture

Recommended Activity Owner

Legal / activity owner

Target Systems & Interfaces

Core Lending Monolith & Transaction StoreSYS-002 Enterprise Cloud Data WarehouseSYS-004

Mechanism Chapter

Chapter 3 — Scope, Roles, Exemptions and Processing Grounds

Verification Specification & Workpaper

Proposed Test Specimen ID

SPEC-Q10-OBL-03

proposed per-row review/acceptance specification; not a claim of executed statutory coverage

Populated Teaching Workpaper

out/dossier/CASE-001/purpose-decisions.json

populated hypothetical decision/specimen; not actual enterprise execution

Local Execution Reference

out/dossier/CASE-001/tests/results.json

Canonical Statutory Grounding

Source references verified against the official Gazette of India publication baseline.

ACT-4 Lines 160–166

Commencement: 2027-05-13 (scheduled, not yet operative)

Obligated Actor

Person processing personal data

Trigger Context

Processing

Statutory Conditions

Lawful purpose plus consent or a section 7 use.

Statutory Exceptions

Subject to other applicable provisions and exemptions.

View Official Gazette Document

Back to Control Master Matrix View Canonical Provision Register