Legal Register
Control Workpaper
OBL-15 Section 8(9) ACT-8

OBL-15: DPO & Grievance Contact Publication

Publishes business contact details of the Data Protection Officer or grievance representative.

Statutory scope: Section 8(9) · Assigned to Rights operations / Legal · Systems: Customer App & Web Portal (SYS-001); published contact surface

Operational Interface Requirement

Recommended interface: Remove the published business contact for the relevant responsible person; expected outcome is publication gate failed, not a complete rights-service claim.

Expected Audit Assertion / Test Result

Remove the published business contact for the relevant responsible person; expected outcome is publication gate failed, not a complete rights-service claim.

Governance & Architecture

Recommended Activity Owner
Rights operations / Legal
Target Systems & Interfaces
Customer App & Web PortalSYS-001published contact surface

Verification Specification & Workpaper

Proposed Test Specimen ID
SPEC-Q10-OBL-15

proposed per-row review/acceptance specification; not a claim of executed statutory coverage

Populated Teaching Workpaper
out/dossier/CASE-001/rights-case.json

populated hypothetical decision/specimen; not actual enterprise execution

Local Execution Reference
out/dossier/CASE-001/tests/results.json

Canonical Statutory Grounding

Source references verified against the official Gazette of India publication baseline.

ACT-8 Lines 330–385
Commencement: 2027-05-13 (scheduled, not yet operative)
Obligated Actor

Data Fiduciary

Trigger Context

Processing by it or its processor

Statutory Conditions

Responsibility despite agreements/principal default; valid processor contract; conditional data accuracy; safeguards; breach intimation; erasure; contact and grievance mechanism.

Statutory Exceptions

s8(7) lawful-retention exception; s17 preserves s8(1),(5) under subsection (1).