Legal Register
ACT-6(10) Tranche 3 (13 May 2027) — Core Operating Cliff
Status: scheduled, not yet operative
Section 6(10): Consent basis questioned in a proceeding
Recommended receipt design supports proof but is not statutory field list.
Statutory Trigger
Consent basis questioned in a proceeding
Applies to: Data Fiduciary
Substantive Conditions
Prove notice and consent in accordance with Act/Rules.
Statutory Exceptions
Not universally imposed on SDF alone.
Official Gazette Text (Verbatim Publication)
Ministry of Law and Justice publication, Digital Personal Data Protection Act, 2023.
(10) Where a consent given by the Data Principal is the basis of processing of
personal data and a question arises in this regard in a proceeding, the Data Fiduciary shall
be obliged to prove that a notice was given by her to the Data Principal and consent was
given by such Data Principal to the Data Fiduciary in accordance with the provisions of this
Act and the rules made thereunder.
Mapped Operational Controls (1)
Enterprise obligations in the Control Master Matrix grounded in this statutory provision.