In simple words
This lists the purposes for which the Government can ask for information under rule 23, and who is authorised to ask. These include State uses for security, uses under law, and assessments for notifying Significant Data Fiduciaries.
- What this means for you
- This limits when and by whom information can be demanded.
- What this means for businesses
- Check that a request comes from the authorised person listed for that purpose.
- Everyday example
- An officer authorised by the MeitY Secretary asks for data to assess a platform.
Who it applies to
Data Fiduciaries, intermediaries and the Central Government.
Related Rules
Official textas notified
Source: MeitY copy of the Gazette, page 40. Printed dashes are shown as colons; the wording is unchanged.
[See rule 23(1) and 8(3)]
| S. no. | Purpose | Authorised person |
|---|---|---|
| 1. | Use, by the State or any of its instrumentalities, of personal data of a Data Principal in the interest of sovereignty and integrity of India or security of the State. | Such officer of the State or of any of its instrumentalities notified under clause (a) of sub-section (2) of section 17 of the Act, as the Central Government or the head of such instrumentality, as the case may be, may designate in this behalf. |
| 2. | Use, by the State or any of its instrumentalities, of personal data of a Data Principal for the following purposes, namely: (i) performance of any function under any law for the time being in force in India; or (ii) disclosure of any information for fulfilling any obligation under any law for the time being in force in India. | Person authorised under applicable law. |
| 3. | Carrying out assessment for notifying any Data Fiduciary or class of Data Fiduciaries as Significant Data Fiduciary. | Such officer of the Central Government, in the Ministry of Electronics and Information Technology, as the Secretary in charge of the said Ministry may designate in this behalf. |