Section 16: Offshore processing/transfer
Separate from general s38 conflict rule; a contract cannot override a binding restriction.
Offshore processing/transfer
Applies to: Central Government; Data Fiduciary
Government may notify destination restrictions.
s16(2) preserves higher protection/restriction in other Indian law for transfers.
Official Gazette Text (Verbatim Publication)
Ministry of Law and Justice publication, Digital Personal Data Protection Act, 2023.
Mapped Operational Controls (3)
Enterprise obligations in the Control Master Matrix grounded in this statutory provision.
Cross-Border Data Transfer Governance (Rule 15)
Enforces cross-border transfer blacklists, adequacy checks, and contractual transfer terms.
Notified Cross-Border Transfer Restrictions (Section 16(1))
Blocks personal data transfers to countries blacklisted or restricted by the Central Government.
Sectoral Higher Transfer Standards Saving (Section 16(2))
Preserves stricter sectoral data localization and transfer mandates (RBI, SEBI, IRDAI).