OBL-43: Notified Cross-Border Transfer Restrictions (Section 16(1))

Blocks personal data transfers to countries blacklisted or restricted by the Central Government.

Statutory scope: Section 16(1) — notified restrictions · Assigned to Architecture / sector Legal · Systems: Foreign-Region Secondary Backup Replica (SYS-008); Overseas Analytics Cluster (SYS-009)

Operational Interface Requirement

Recommended interface: Remove an applicable destination/sector decision; expected outcome is block/review, not permission from a hosting-region label.

Expected Audit Assertion / Test Result

Remove an applicable destination/sector decision; expected outcome is block/review, not permission from a hosting-region label.

Governance & Architecture

Recommended Activity Owner

Architecture / sector Legal

Target Systems & Interfaces

Foreign-Region Secondary Backup ReplicaSYS-008 Overseas Analytics ClusterSYS-009

Mechanism Chapter

Chapter 18 — Transfers, Cloud and Enterprise Reference Architecture

Verification Specification & Workpaper

Proposed Test Specimen ID

SPEC-Q10-OBL-43

proposed per-row review/acceptance specification; not a claim of executed statutory coverage

Populated Teaching Workpaper

out/dossier/CASE-001/transfer-decisions.json

populated hypothetical decision/specimen; not actual enterprise execution

Local Execution Reference

out/dossier/CASE-001/tests/results.json

Canonical Statutory Grounding

Source references verified against the official Gazette of India publication baseline.

ACT-16 Lines 515–522

Commencement: 2027-05-13 (scheduled, not yet operative)

Obligated Actor

Central Government; Data Fiduciary

Trigger Context

Offshore processing/transfer

Statutory Conditions

Government may notify destination restrictions.

Statutory Exceptions

s16(2) preserves higher protection/restriction in other Indian law for transfers.

View Official Gazette Document

Back to Control Master Matrix View Canonical Provision Register