OBL-22: Cross-Border Data Transfer Governance (Rule 15)
Enforces cross-border transfer blacklists, adequacy checks, and contractual transfer terms.
Statutory scope: Rule 15 (transfer) · Assigned to Architecture / sector Legal · Systems: Foreign-Region Secondary Backup Replica (SYS-008); Overseas Analytics Cluster (SYS-009)
Recommended interface: Remove an applicable destination/sector decision; expected outcome is block/review, not permission from a hosting-region label.
Remove an applicable destination/sector decision; expected outcome is block/review, not permission from a hosting-region label.
Governance & Architecture
Verification Specification & Workpaper
proposed per-row review/acceptance specification; not a claim of executed statutory coverage
populated hypothetical decision/specimen; not actual enterprise execution
Canonical Statutory Grounding
Source references verified against the official Gazette of India publication baseline.
Data Fiduciary; Central Government
Foreign transfer/access
Meet general/special order requirements for making personal data available to foreign State/controlled person/entity/agency.
Also s16 and conditional r13(4), plus sector duties.
Central Government; Data Fiduciary
Offshore processing/transfer
Government may notify destination restrictions.
s16(2) preserves higher protection/restriction in other Indian law for transfers.