Legal Register
RULE-15 Tranche 3 (13 May 2027) — Core Operating Cliff
Status: scheduled, not yet operative
Rule 15: Foreign transfer/access
Not evidence-tag retention/documentation law or generic destination threshold.
Regulated Actor: Data Fiduciary; Central Government
Gazette Baseline: Lines 1319–1323
Subordinate Trigger
Foreign transfer/access
Applies to: Data Fiduciary; Central Government
Rule Prescriptions
Meet general/special order requirements for making personal data available to foreign State/controlled person/entity/agency.
Exceptions & Provisos
Also s16 and conditional r13(4), plus sector duties.
Official Gazette Text (Verbatim Rules Publication)
Ministry of Electronics and Information Technology, Digital Personal Data Protection Rules, 2025.
15. Transfer of personal data outside the territory of India.— Any personal data processed by a Data
Fiduciary under the Act may be transferred outside the territory of India subject to the restriction that the
Data Fiduciary shall meet such requirements as the Central Government may, by general or special order,
specify in respect of making such personal data available to any foreign State, or to any person or entity
under the control of or any agency of such a State.
Mapped Operational Controls (1)
Enterprise obligations in the Control Master Matrix implementing this subordinate rule.