Legal Register
ACT-17(1)(f) Tranche 3 (13 May 2027) — Core Operating Cliff
Status: scheduled, not yet operative
Section 17(1)(f): Qualifying processing
No citizenship shortcut or broad reasonable-purpose ground; read common chapeau ACT-17.
Regulated Actor: Person ascertaining specified default information
Gazette Baseline: Lines 543–554
Statutory Trigger
Qualifying processing
Applies to: Person ascertaining specified default information
Substantive Conditions
Financial information/assets/liabilities of loan/advance defaulter; financial institution/default as IBC-defined; comply with other-law disclosure provisions.
Statutory Exceptions
Chapter II except s8(1),(5), Chapter III and s16 disapplied; s8(1),(5) remain.
Official Gazette Text (Verbatim Publication)
Ministry of Law and Justice publication, Digital Personal Data Protection Act, 2023.
(f) the processing is for the purpose of ascertaining the financial information
and assets and liabilities of any person who has defaulted in payment due on account
of a loan or advance taken from a financial institution, subject to such processing
being in accordance with the provisions regarding disclosure of information or data
in any other law for the time being in force.
Explanation.—For the purposes of this clause, the expressions “default” and
“financial institution” shall have the meanings respectively assigned to them in
31 of 2016. sub-sections (12) and (14) of section 3 of the Insolvency and Bankruptcy Code, 2016.
Illustration.
X, an individual, takes a loan from Y, a bank. X defaults in paying her monthly loan
repayment instalment on the date on which it falls due. Y may process the personal data of
X for ascertaining her financial information and assets and liabilities.