Legal Register
Role-Based Pathway
Executive Role Lens

Procurement & Sourcing Lead

Technology landscape evaluation, Big 4 comparison, RFP weighted scoring and PoV gates

Key Statutory Provisions

3 Enforced Provisions
Section 8(2) Mandatory Data Processing Agreements & Subcontracting Controls
View Act

Enforces that a Data Fiduciary may only engage a Data Processor under a valid, legally binding contract that restricts processing strictly to the fiduciary's instructions and enforces security parity.

Section 8(11) Vendor Compliance Governance & Pass-Through Obligations
View Act

Requires ongoing vendor audit rights, sub-processor notification thresholds, SLA tracking, and operational capability vetting for third-party software and SaaS providers.

Section 12(3) & Rule 8 Vendor Data Deletion, Portability & Lock-In Mitigation
View Act

Contractual guarantees for data exportability, certified data destruction upon contract termination, and elimination of proprietary vendor lock-in risks.

Key Deliverables & Artifacts

4 Key Deliverables
Evidence-graded solution catalogue (Ch. 25)
Consulting & Big 4 offering comparison (Ch. 26)
Indian technology firm capability matrix (Ch. 27)
Reusable RFP, weighted scorecard & PoV test scenarios (Ch. 30, App G)