Legal Register
ACT-37 Tranche 3 (13 May 2027) — Core Operating Cliff
Status: scheduled, not yet operative
Section 37: Written Board reference on two or more penalties plus public-interest blocking advice
Check all statutory prerequisites and commencement.
Regulated Actor: Central Government/authorised officer; intermediary
Gazette Baseline: Lines 865–884
Statutory Trigger
Written Board reference on two or more penalties plus public-interest blocking advice
Applies to: Central Government/authorised officer; intermediary
Substantive Conditions
Fiduciary hearing; necessity/expediency; written reasons; blocking direction; intermediary compliance.
Statutory Exceptions
Not an automatic shutdown following a single breach.
Official Gazette Text (Verbatim Publication)
Ministry of Law and Justice publication, Digital Personal Data Protection Act, 2023.
37. (1) The Central Government or any of its officers specially authorised by it in this Power of
behalf may, upon receipt of a reference in writing from the Board that— Central
Government
(a) intimates the imposition of monetary penalty by the Board on a Data Fiduciary to issue
directions.
in two or more instances; and
(b) advises, in the interests of the general public, the blocking for access by the
public to any information generated, transmitted, received, stored or hosted, in any
computer resource that enables such Data Fiduciary to carry on any activity relating
to offering of goods or services to Data Principals within the territory of India,
after giving an opportunity of being heard to that Data Fiduciary, on being satisfied that it
is necessary or expedient so to do, in the interests of the general public, for reasons to be
recorded in writing, by order, direct any agency of the Central Government or any intermediary
to block for access by the public or cause to be blocked for access by the public any such
information.
(2) Every intermediary who receives a direction issued under sub-section (1) shall be
bound to comply with the same.
(3) For the purposes of this section, the expressions “computer resource”,
“information” and “intermediary” shall have the meanings respectively assigned to them in
21 of 2000. the Information Technology Act, 2000.
Mapped Operational Controls (1)
Enterprise obligations in the Control Master Matrix grounded in this statutory provision.