Legal Register
ACT-15 Tranche 3 (13 May 2027) — Core Operating Cliff
Status: scheduled, not yet operative
Section 15: Exercise of rights and provision of data
Do not punish legitimate withdrawal or make legal rights conditional on unrelated duties.
Statutory Trigger
Exercise of rights and provision of data
Applies to: Data Principal
Substantive Conditions
Comply with laws; no impersonation, suppression of specified material information, false/frivolous complaint; authentic correction/erasure information.
Statutory Exceptions
Does not remove fiduciary responsibility: s8(1).
Official Gazette Text (Verbatim Publication)
Ministry of Law and Justice publication, Digital Personal Data Protection Act, 2023.
Duties of Data 15. A Data Principal shall perform the following duties, namely:—
Principal.
(a) comply with the provisions of all applicable laws for the time being in force
while exercising rights under the provisions of this Act;
(b) to ensure not to impersonate another person while providing her personal
data for a specified purpose;
(c) to ensure not to suppress any material information while providing her
personal data for any document, unique identifier, proof of identity or proof of address
issued by the State or any of its instrumentalities;
(d) to ensure not to register a false or frivolous grievance or complaint with a
Data Fiduciary or the Board; and
(e) to furnish only such information as is verifiably authentic, while exercising
the right to correction or erasure under the provisions of this Act or the rules made
thereunder.
Mapped Operational Controls (1)
Enterprise obligations in the Control Master Matrix grounded in this statutory provision.