Legal Register
Control Workpaper
OBL-08 Section 8(1) to (2) ACT-8

OBL-08: Processor Engagement & Subprocessing Contracts

Enforces valid data processing agreements and downstream propagation of statutory duties.

Statutory scope: Section 8(1) to (2) · Assigned to Vendor manager / Legal · Systems: Marketing Automation Engine (SYS-003); Processor Orchestration Gateway & Queue (SYS-013)

Operational Interface Requirement

Recommended interface: Withhold the material supplier acknowledgement; expected outcome is unresolved execution and escalation, never global completion.

Expected Audit Assertion / Test Result

Withhold the material supplier acknowledgement; expected outcome is unresolved execution and escalation, never global completion.

Governance & Architecture

Recommended Activity Owner
Vendor manager / Legal
Target Systems & Interfaces

Verification Specification & Workpaper

Proposed Test Specimen ID
SPEC-Q10-OBL-08

proposed per-row review/acceptance specification; not a claim of executed statutory coverage

Populated Teaching Workpaper
out/dossier/CASE-001/processor-schedule.json

populated hypothetical decision/specimen; not actual enterprise execution

Local Execution Reference
out/dossier/CASE-001/tests/results.json

Canonical Statutory Grounding

Source references verified against the official Gazette of India publication baseline.

ACT-8 Lines 330–385
Commencement: 2027-05-13 (scheduled, not yet operative)
Obligated Actor

Data Fiduciary

Trigger Context

Processing by it or its processor

Statutory Conditions

Responsibility despite agreements/principal default; valid processor contract; conditional data accuracy; safeguards; breach intimation; erasure; contact and grievance mechanism.

Statutory Exceptions

s8(7) lawful-retention exception; s17 preserves s8(1),(5) under subsection (1).