Legal Register
Control Workpaper
OBL-37 Section 11 ACT-11

OBL-37: Right to Information & Processing Summary (Section 11)

Furnishes Data Principals a summary of processed personal data and shared third-party identities.

Statutory scope: Section 11 · Assigned to Rights operations / Legal · Systems: Principal Rights & Grievance Service (SYS-011); rights access work item

Operational Interface Requirement

Recommended interface: Remove prior-consent scope or withhold required recipient information without a supported exception; expected outcome is scoped review or incomplete access response.

Expected Audit Assertion / Test Result

Remove prior-consent scope or withhold required recipient information without a supported exception; expected outcome is scoped review or incomplete access response.

Governance & Architecture

Recommended Activity Owner
Rights operations / Legal
Target Systems & Interfaces

Verification Specification & Workpaper

Proposed Test Specimen ID
SPEC-Q10-OBL-37

proposed per-row review/acceptance specification; not a claim of executed statutory coverage

Populated Teaching Workpaper
out/dossier/CASE-001/rights-case.json

populated hypothetical decision/specimen; not actual enterprise execution

Local Execution Reference
out/dossier/CASE-001/tests/results.json

Canonical Statutory Grounding

Source references verified against the official Gazette of India publication baseline.

ACT-11 Lines 441–462
Commencement: 2027-05-13 (scheduled, not yet operative)
Obligated Actor

Data Principal; said Data Fiduciary

Trigger Context

Request after prior consent including s7(a)

Statutory Conditions

Summary of data/activities; identities and shared-data description; prescribed further information.

Statutory Exceptions

s11(2) excludes (1)(b)/(c) for qualifying written requests by law-authorised fiduciaries for specified offence/cyber purposes.