Legal Register
Control Workpaper
OBL-09 Section 8(3) ACT-8

OBL-09: Personal Data Accuracy & Decision Completeness

Maintains accuracy and completeness of personal data used to make decisions affecting principals.

Statutory scope: Section 8(3) · Assigned to Data owner / rights operations · Systems: Core Lending Monolith & Transaction Store (SYS-002); Analytics & AI/ML Training Environment (SYS-005)

Operational Interface Requirement

Recommended interface: Correct the source but withhold downstream refresh evidence; expected outcome is partial status, not a complete correction claim.

Expected Audit Assertion / Test Result

Correct the source but withhold downstream refresh evidence; expected outcome is partial status, not a complete correction claim.

Governance & Architecture

Recommended Activity Owner
Data owner / rights operations
Target Systems & Interfaces

Verification Specification & Workpaper

Proposed Test Specimen ID
SPEC-Q10-OBL-09

proposed per-row review/acceptance specification; not a claim of executed statutory coverage

Populated Teaching Workpaper
out/dossier/CASE-001/rights-case.json

populated hypothetical decision/specimen; not actual enterprise execution

Local Execution Reference
out/dossier/CASE-001/tests/results.json

Canonical Statutory Grounding

Source references verified against the official Gazette of India publication baseline.

ACT-8 Lines 330–385
Commencement: 2027-05-13 (scheduled, not yet operative)
Obligated Actor

Data Fiduciary

Trigger Context

Processing by it or its processor

Statutory Conditions

Responsibility despite agreements/principal default; valid processor contract; conditional data accuracy; safeguards; breach intimation; erasure; contact and grievance mechanism.

Statutory Exceptions

s8(7) lawful-retention exception; s17 preserves s8(1),(5) under subsection (1).