Statutory Knowledge Base
Appendix A Source Register
Canonical Provision & Rules Register
Complete repository of all 102 statutory provisions, enacted rules, and commencement tranches. Every passage is verified against physical line numbers in the official Gazette of India publication.
Showing 102 of 102 statutory recordsResearch Baseline: 15 Sep 2026
| Provision | Statutory Actor & Trigger | Effective Tranche | Practical Operating Guidance | Details |
|---|---|---|---|---|
| Section 1 | Central Government Commencement by Gazette notification | 2025-11-13 | Read the applicable tranche before stating an obligation is live. | |
| Section 2 | All statutory actors Interpretation of defined terms | 2025-11-13 | Roles are activity-specific; nationality and product labels do not determine them. | |
| Section 3 | Person processing digital personal data India processing or offshore goods/services connection | 2027-05-13 | Publicly accessible does not by itself meet the public-data exclusion. | |
| Section 4 | Person processing personal data Processing | 2027-05-13 | Contract, reasonable business purposes and vendor consent hashes are not a third freestanding ground. | |
| Section 5 | Data Fiduciary Consent request; prior consent before commencement | 2027-05-13 | No universal 13-Nov-2026 consent-refresh expiry. | |
| Section 6 | Data Principal; Data Fiduciary; Consent Manager Consent-based processing, withdrawal, CM registration, or disputed consent | mixed: s6(9) 2026-11-13; s6(1)-(8),(10) 2027-05-13 | s6(9) is CM registration, not SDF recordkeeping. | |
| Section 7 | Data Fiduciary; State-specific actors in (b)/(c) Facts satisfy a listed use | 2027-05-13 | Do not authorise reuse merely because a notice names a purpose. | |
| Section 8 | Data Fiduciary Processing by it or its processor | 2027-05-13 | Receipt is not proof of erasure; fulfilment of one test is not statutory assurance. | |
| Section 9 | Data Fiduciary; Central Government for notifications Child data or covered disability/guardian processing | 2027-05-13 | Parent consent alone does not authorise prohibited child targeting. | |
| Section 10 | Central Government; notified SDF Notification of fiduciary or class following relevant-factor assessment | 2027-05-13 | Voluntary readiness is not a legal designation; independence is not an express firm-wide ban here. | |
| Section 11 | Data Principal; said Data Fiduciary Request after prior consent including s7(a) | 2027-05-13 | Not a general portability right or a 72-hour SLA; do not apply blindly to every s7 ground. | |
| Section 12 | Data Principal; Data Fiduciary Correction/completion/update/erasure request within prior-consent including s7(a) scope | 2027-05-13 | Reasoned partial response and propagation are operating recommendations, not verbatim s12(3) duties. | |
| Section 13 | Data Fiduciary or Consent Manager; Data Principal Grievance about obligations or rights | 2027-05-13 | Use r14(3) grievance period distinctly. | |
| Section 14 | Data Principal and nominated individual Death or incapacity activates nomination | 2027-05-13 | Keep subject identity distinct from representative; support reversible incapacity and multiple nominees. | |
| Section 15 | Data Principal Exercise of rights and provision of data | 2027-05-13 | Do not punish legitimate withdrawal or make legal rights conditional on unrelated duties. | |
| Section 16 | Central Government; Data Fiduciary Offshore processing/transfer | 2027-05-13 | Separate from general s38 conflict rule; a contract cannot override a binding restriction. | |
| Section 17 | Actors specified in exemption subrows Clause-specific conditions or notifications | 2027-05-13 | Determine activity, facts, disapplied provisions, preserved provisions and notification evidence before use. | |
| Section 18 | Central Government; Board Notified establishment | 2025-11-13 | Read GSR844 and tranche map separately. | |
| Section 19 | Central Government; Chairperson and Members Composition and appointment | 2025-11-13 | Record the conflicting membership wording in recruitment vs GSR845 without silently reconciling. | |
| Section 20 | Chairperson and Members Appointment/service | 2025-11-13 | Salary schedule is not appointment evidence. | |
| Section 21 | Central Government; Chairperson and Members Disqualification/removal | 2025-11-13 | Do not infer removal without process. | |
| Section 22 | Chairperson, Members; Central Government Resignation, vacancy, cessation | 2025-11-13 | Vacancy and effective resignation are separate events. | |
| Section 23 | Board; Chairperson and Members Meetings/proceedings; Chairperson inability | 2025-11-13 | Read r19 for meeting chair and inquiry timing; do not conflate with appointments. | |
| Section 24 | Board; Central Government Officers/employees appointment | 2025-11-13 | Read r21 and Sixth Schedule. | |
| Section 25 | Chairperson, Members, officers/employees Acting/purporting to act under Act | 2025-11-13 | Quote retained statutory reference without silently updating its wording. | |
| Section 26 | Chairperson Board administration/case allocation | 2025-11-13 | Administrative machinery does not accelerate core enforcement. | |
| Section 27 | Board Listed intimation, complaint, reference or court direction | mixed: s27(1)(d) 2026-11-13; remainder 2027-05-13 | No legitimate-use condition in s27(1)(d). | |
| Section 28 | Board Receipt of s27 material and sufficient grounds for inquiry | 2027-05-13 | Do not present inquiry as automatic penalty. | |
| Section 29 | Aggrieved person; Appellate Tribunal Board order/direction appeal | 2027-05-13 | Appeal timing is not a rights-request deadline. | |
| Section 30 | Appellate Tribunal; civil court Execution of tribunal order | 2027-05-13 | Distinct from Board adjudication. | |
| Section 31 | Board; parties; mediator Board considers complaint mediable | 2027-05-13 | Separate mediation from appeal. | |
| Section 32 | Board; person giving undertaking During s28 proceeding | 2027-05-13 | No universal immunity from signing a remediation plan. | |
| Section 33 | Board; person found in significant breach Conclusion of inquiry, significant breach and hearing | 2027-05-13 | No expected-loss formula from fixture pass rate; aggregate exposure requires separate legal analysis. | |
| Section 34 | Board / public treasury Penalty sums realised | 2027-05-13 | Do not label penalty recovery damages. | |
| Section 35 | Government, Board and specified officials Good-faith action/intended action | 2025-11-13 | Not general immunity for fiduciaries. | |
| Section 36 | Central Government; Board/fiduciary/intermediary recipients Government calls information for Act purposes | 2027-05-13 | Read r23/Seventh Schedule for specified government information calls. | |
| Section 37 | Central Government/authorised officer; intermediary Written Board reference on two or more penalties plus public-interest blocking advice | 2027-05-13 | Check all statutory prerequisites and commencement. | |
| Section 38 | Concurrent-law decision maker Concurrent law; actual conflict | 2025-11-13 | Do not use a blanket stricter-sector-law-wins rule. | |
| Section 39 | Civil courts/courts/other authorities Matter Board empowered to address or action under Act powers | 2025-11-13 | Interpretive application needs legal review. | |
| Section 40 | Central Government Rulemaking | 2025-11-13 | No invented impending amendment to provenance-tag schema. | |
| Section 41 | Central Government; Parliament Rules and ss16/42 notifications | 2025-11-13 | Publication and Parliamentary laying are separate steps. | |
| Section 42 | Central Government Gazette amendment of penalty Schedule | 2025-11-13 | This specific publication rule cannot be generalised to every notification. | |
| Section 43 | Central Government Difficulty implementing Act | 2025-11-13 | Do not call ss38-43 an offences/prosecution chapter. | |
| Section 44 | Legislature / affected enactments Phased consequential amendments | mixed: s44(1),(3) 2025-11-13; s44(2) 2027-05-13 | Do not declare IT Act43A/SPDI displaced before applicable commencement; independent amendments need checking. | |
| Section 6(9) | Consent Manager Seeking/holding statutory CM status | 2026-11-13 | No SDF recordkeeping duty here. | |
| Section 6(10) | Data Fiduciary Consent basis questioned in a proceeding | 2027-05-13 | Recommended receipt design supports proof but is not statutory field list. | |
| Section 7(a) | Data Fiduciary Qualifying use under s7 | 2027-05-13 | Receipt requested by principal may qualify; notice-only or third-person data alone does not establish facts. | |
| Section 7(b) | State or instrumentality Qualifying use under s7 | 2027-05-13 | Not commercial marketing or an unrestricted State-data reuse ground; r5 and Second Schedule apply. | |
| Section 7(c) | State or instrumentality Qualifying use under s7 | 2027-05-13 | Private employer is not State solely because it performs compliance work. | |
| Section 7(d) | Person under disclosure obligation Qualifying use under s7 | 2027-05-13 | Not every legal obligation or private-party disclosure fits (d). | |
| Section 7(e) | Person complying with judgment/decree/order Qualifying use under s7 | 2027-05-13 | Medical emergency is not clause (e). | |
| Section 7(f) | Data Fiduciary responding to emergency Qualifying use under s7 | 2027-05-13 | No express incapacity prerequisite; permitted emergency disclosure is not itself a breach. | |
| Section 7(g) | Data Fiduciary taking health measures Qualifying use under s7 | 2027-05-13 | No epidemic-declaration condition stated here. | |
| Section 7(h) | Data Fiduciary taking safety/assistance measures Qualifying use under s7 | 2027-05-13 | Not employment or broker commercial reuse. | |
| Section 7(i) | Data Fiduciary processing for employment/employer protection Qualifying use under s7 | 2027-05-13 | No numbered statutory recruitment/onboarding limbs; applicant/monitoring boundaries need fact-specific assessment. | |
| Section 17(1)(a) | Person enforcing legal right/claim Qualifying processing | 2027-05-13 | No citizenship shortcut or broad reasonable-purpose ground; read common chapeau ACT-17. | |
| Section 17(1)(b) | Indian court, tribunal or legally entrusted judicial/quasi-judicial/regulatory/supervisory body Qualifying processing | 2027-05-13 | No citizenship shortcut or broad reasonable-purpose ground; read common chapeau ACT-17. | |
| Section 17(1)(c) | Person processing for stated enforcement interest Qualifying processing | 2027-05-13 | No citizenship shortcut or broad reasonable-purpose ground; read common chapeau ACT-17. | |
| Section 17(1)(d) | Person based in India Qualifying processing | 2027-05-13 | No citizenship shortcut or broad reasonable-purpose ground; read common chapeau ACT-17. | |
| Section 17(1)(e) | Person implementing qualified corporate scheme Qualifying processing | 2027-05-13 | No citizenship shortcut or broad reasonable-purpose ground; read common chapeau ACT-17. | |
| Section 17(1)(f) | Person ascertaining specified default information Qualifying processing | 2027-05-13 | No citizenship shortcut or broad reasonable-purpose ground; read common chapeau ACT-17. | |
| Section 17(2)(a) | Notified State instrumentality and Central Government receiving its data Specified notification/security/public-order interests | 2027-05-13 | Do not substitute an assumed general State exemption. | |
| Section 17(2)(b) | Research/archiving/statistics processor Necessary research, archiving or statistical processing | 2027-05-13 | Model development affecting individuals cannot casually use this exemption. | |
| Section 17(3) | Central Government; notified fiduciary/class including eligible startup Notification considering volume/nature | 2027-05-13 | Keep notification ID and applicability facts. | |
| Section 17(4) | State or instrumentality State processing | 2027-05-13 | Not equivalent to s17(2)(a). | |
| Section 17(5) | Central Government; notified fiduciary/class Time-limited notification power | 2027-05-13 | No automatic five-year enterprise grace period. | |
| Schedule to Act | Board / person subject to significant breach finding s33 adjudication | 2027-05-13 | Not fixed fines, not summed expected exposure, and child category not joint-highest. | |
| Rule 1 | Rulemaker / all actors Commencement | 2025-11-13 | Ordinary calendar tranche dates, not upload dates. | |
| Rule 2 | All actors Definitions | 2025-11-13 | A user account is not restricted to login/password account. | |
| Rule 3 | Data Fiduciary Notice | 2027-05-13 | Comparable ease is statutory; identical screens/steps are an optional heuristic. | |
| Rule 4 | Applicant Consent Manager; Board; registered CM Application/registration/non-adherence | 2026-11-13 | Registration starts earlier than s6(7)/(8) principal channel. | |
| Rule 5 | State and instrumentalities Prescribed benefits processing | 2027-05-13 | Not a private retail ground. | |
| Rule 6 | Data Fiduciary; processors by contractual propagation Protection of possessed/controlled data | 2027-05-13 | No required algorithm or proof that one passed test satisfies s8(5). | |
| Rule 7 | Data Fiduciary Awareness of any personal-data breach | 2027-05-13 | Track awareness separately from occurrence/detection; incomplete knowledge does not permit silence. | |
| Rule 8 | Data Fiduciary (processing itself or through processor) Class inactivity or any processing for r8(3) | 2027-05-13 | Separate cessation of purpose use, retained-data restricted access and physical erasure; do not retain marketing access for statutory archive. | |
| Rule 9 | Data Fiduciary Website/app and every rights communication response | 2027-05-13 | Use accountable reachable contact in specimens. | |
| Rule 10 | Data Fiduciary; individual identifying as parent Before child processing | 2027-05-13 | No unspecified low-risk waiver; adult identity alone is not conclusive proof of parentage. | |
| Rule 11 | Data Fiduciary; claimed lawful guardian Covered disability guardian consent | 2027-05-13 | Do not require guardians for all disabled adults or all healthcare users. | |
| Rule 12 | Specified fiduciaries/purpose actors Fourth Schedule conditions met | 2027-05-13 | Educational exception is not general commercial edtech or targeting licence. | |
| Rule 13 | Notified SDF; assessment/audit person; Central Government Designation; algorithms; Government data specification | 2027-05-13 | No KS, AUC, fairness-code or API threshold supplied here; correct Departments in (5). | |
| Rule 14 | Data Fiduciary; applicable CM; principal Rights and grievance services | 2027-05-13 | Use source wording carefully: r14(3) is awkwardly drafted; interpret with s13(2), not as a publication delay. | |
| Rule 15 | Data Fiduciary; Central Government Foreign transfer/access | 2027-05-13 | Not evidence-tag retention/documentation law or generic destination threshold. | |
| Rule 16 | Qualifying research/archiving/statistical processor Exemption | 2027-05-13 | Rule summary cannot erase parent Act condition. | |
| Rule 17 | Central Government; Search-cum-Selection Committees Appointments | 2025-11-13 | Procedure not proof of actual appointment. | |
| Rule 18 | Chairperson and Members Service | 2025-11-13 | Separate staffing evidence from service terms. | |
| Rule 19 | Board; Chairperson; Members Meetings and inquiry | 2025-11-13 | An operative institutional rule does not accelerate deferred core enforcement. | |
| Rule 20 | Board Digital functioning | 2025-11-13 | Not proof a working public portal exists. | |
| Rule 21 | Board; Central Government Staff appointment | 2025-11-13 | No evidence of filled posts. | |
| Rule 22 | Aggrieved appellant; Tribunal Appeal | 2027-05-13 | Not a fiduciary control-testing rule. | |
| Rule 23 | Central Government through authorised person; fiduciary/intermediary Information call for Seventh Schedule purposes | 2027-05-13 | Seventh Schedule is information purposes/persons, not nomination. | |
| Schedule I | CM applicant and registered CM; Board r4 eligibility/operation | 2026-11-13 | Machine-readable CM records not a general s11 portability right. | |
| Schedule II | State/qualifying research processor r5(1)/r16 | 2027-05-13 | Both State-benefit and qualified research standards, not a nomination schedule. | |
| Schedule III | Threshold-qualified e-commerce/gaming/social-media fiduciary r8(1) inactivity | 2027-05-13 | No payments-vs-edtech period table; phased commencement anchor needs explicit interpretation. | |
| Schedule IV | Listed child-processing classes/purposes r12 | 2027-05-13 | Do not generalise safety/education into child targeted-ad permission. | |
| Schedule V | Chairperson and other Members r18 service | 2025-11-13 | Not rights-request or nomination mechanism. | |
| Schedule VI | Board officers and employees r21(2) | 2025-11-13 | Not fiduciary retention or SDF schedule. | |
| Schedule VII | Government authorised persons; fiduciaries under r8(3) r23(1) information purposes and r8(3) retention purposes | 2027-05-13 | Not nomination; r8(3) does not confer active commercial-use permission. | |
| GSR-843E | Central Government Gazette publication | 2025-11-13 | Calendar calculation from issue date: 13-Nov-2026 and 13-May-2027. | |
| GSR-844E | Central Government / Board Gazette publication | 2025-11-13 | Institution established; powers remain tranche-specific. | |
| GSR-845E | Central Government / Board Composition notification | 2025-11-13 | Do not assert appointed/staffed Board, or settle actual membership count from recruitment. | |
| GSR-892E | Rulemaker Corrigendum to GSR846 | corrigendum dated 2025-12-10; Gazette issue 2025-12-11 | Page38 correction is Fourth Schedule, not First Schedule. | |
| BOARD-RECRUITMENT | MeitY / applicants Recruitment notice | administrative notice; not statutory commencement | Month from URL is not instrument date; keep discrepancy unresolved. |