/Reference
Act ↔ Rules map: which rules implement which sections
20 of 44 sections have rules made under them. The mapping is deterministic: it comes from the “[See section …]” and “section …” references printed in the Rules.
By section of the Act
| Section | Status | Rules made under it | Also referred to in |
|---|---|---|---|
| s. 1 Short title and commencement | In force | — | |
| s. 2 Definitions | In force | — | |
| s. 3 Application of Act | Upcoming | — | |
| s. 4 Grounds for processing personal data | Upcoming | — | |
| s. 5 Notice | Upcoming | r. 3 | |
| s. 6 Consent | Upcoming | r. 4 | |
| s. 7 Certain legitimate uses | Upcoming | r. 5 | |
| s. 8 General obligations of Data Fiduciary | Upcoming | r. 6, r. 7, r. 8, r. 9 | |
| s. 9 Processing of personal data of children | Upcoming | r. 10, r. 11, r. 12 | |
| s. 10 Additional obligations of Significant Data Fiduciary | Upcoming | r. 13 | |
| s. 11 Right to access information about personal data | Upcoming | r. 14 | |
| s. 12 Right to correction and erasure of personal data | Upcoming | r. 14 | |
| s. 13 Right of grievance redressal | Upcoming | r. 14 | |
| s. 14 Right to nominate | Upcoming | r. 14 | |
| s. 15 Duties of Data Principal | Upcoming | — | |
| s. 16 Processing of personal data outside India | Upcoming | r. 15 | |
| s. 17 Exemptions | Upcoming | r. 16 | |
| s. 18 Establishment of Board | In force | — | |
| s. 19 Composition and qualifications for appointment of Chairperson and Members | In force | r. 17 | |
| s. 20 Salary, allowances payable to and term of office | In force | r. 18 | |
| s. 21 Disqualifications for appointment and continuation as Chairperson and Members of Board | In force | — | |
| s. 22 Resignation by Members and filling of vacancy | In force | — | |
| s. 23 Proceedings of Board | In force | r. 19 | |
| s. 24 Officers and employees of Board | In force | r. 21 | |
| s. 25 Members and officers to be public servants | In force | — | |
| s. 26 Powers of Chairperson | In force | — | |
| s. 27 Powers and functions of Board | Upcoming | — | r. 19 |
| s. 28 Procedure to be followed by Board | Upcoming | r. 20 | |
| s. 29 Appeal to Appellate Tribunal | Upcoming | r. 22 | |
| s. 30 Orders passed by Appellate Tribunal to be executable as decree | Upcoming | — | |
| s. 31 Alternate dispute resolution | Upcoming | — | |
| s. 32 Voluntary undertaking | Upcoming | — | |
| s. 33 Penalties | Upcoming | — | |
| s. 34 Crediting sums realised by way of penalties to Consolidated Fund of India | Upcoming | — | |
| s. 35 Protection of action taken in good faith | In force | — | |
| s. 36 Power to call for information | Upcoming | r. 23 | |
| s. 37 Power of Central Government to issue directions | Upcoming | — | |
| s. 38 Consistency with other laws | In force | — | |
| s. 39 Bar of jurisdiction | In force | — | |
| s. 40 Power to make rules | In force | r. 1, r. 2 | |
| s. 41 Laying of rules and certain notifications | In force | — | |
| s. 42 Power to amend Schedule | In force | — | |
| s. 43 Power to remove difficulties | In force | — | |
| s. 44 Amendments to certain Acts | In force | — |
By rule
| Rule | Status | Made under |
|---|---|---|
| r. 1 Short title and commencement | In force | s. 40 |
| r. 2 Definitions | In force | s. 40 |
| r. 3 Notice given by Data Fiduciary to Data Principal | Upcoming | s. 5 |
| r. 4 Registration and obligations of Consent Manager | Upcoming | s. 6 |
| r. 5 Processing of personal data for provision or issue of subsidy, benefit, service, certificate, licence or permit by State and its instrumentalities | Upcoming | s. 7 |
| r. 6 Reasonable security safeguards | Upcoming | s. 8 |
| r. 7 Intimation of personal data breach | Upcoming | s. 8 |
| r. 8 Time period for specified purpose to be deemed as no longer being served | Upcoming | s. 8 |
| r. 9 Contact information of person to answer questions about processing | Upcoming | s. 8 |
| r. 10 Verifiable consent for processing of personal data of child | Upcoming | s. 9 |
| r. 11 Verifiable consent for processing of personal data of person with disability who has lawful guardian | Upcoming | s. 9 |
| r. 12 Exemptions from certain obligations applicable to processing of personal data of child | Upcoming | s. 9 |
| r. 13 Additional obligations of Significant Data Fiduciary | Upcoming | s. 10 |
| r. 14 Rights of Data Principals | Upcoming | s. 11, s. 12, s. 13, s. 14 |
| r. 15 Transfer of personal data outside the territory of India | Upcoming | s. 16 |
| r. 16 Exemption from Act for research, archiving or statistical purposes | Upcoming | s. 17 |
| r. 17 Appointment of Chairperson and other Members | In force | s. 19 |
| r. 18 Salary, allowances and other terms and conditions of service of Chairperson and other Members | In force | s. 20 |
| r. 19 Procedure for meetings of Board and authentication of its orders, directions and instruments | In force | s. 23 |
| r. 20 Functioning of Board as digital office | In force | s. 28 |
| r. 21 Terms and conditions of appointment and service of officers and employees of Board | In force | s. 24 |
| r. 22 Appeal to Appellate Tribunal | Upcoming | s. 29 |
| r. 23 Calling for information from Data Fiduciary or intermediary | Upcoming | s. 36 |