Info. Technology Law
https://www.itlaw.in/rule-3-sensitive-personal-data-or-information/
Export date: Fri Apr 19 13:15:55 2024 / +0000 GMT

Rule 3: Sensitive personal data or information


Sensitive personal data or information of a person means such personal information which consists of information relating to;—
(i) password;
(ii) financial information such as Bank account or credit card or debit card or other payment instrument details ;
(iii) physical, physiological and mental health condition;
(iv) sexual orientation;
(v) medical records and history;
(vi) bio-metric information;
(vii) any detail relating to the above clauses as provided to body corporate for providing service; and
(viii) any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract or otherwise:

Provided that, any information that is freely available or accessible in public domain or furnished under the Right to Information Act, 2005 or any other law for the time being in force shall not be regarded as sensitive personal data or information for the purposes of these rules.
Post date: 2014-11-08 11:09:10
Post date GMT: 2014-11-08 05:39:10

Post modified date: 2019-10-08 00:34:55
Post modified date GMT: 2019-10-07 19:04:55

Export date: Fri Apr 19 13:15:55 2024 / +0000 GMT
This page was exported from Info. Technology Law [ https://www.itlaw.in ]
Export of Post and Page has been powered by [ Universal Post Manager ] plugin from www.ProfProjects.com