RULE 14 – Exemption from Act for Research, Archiving and Statistical purpose
u/s Section 17(2)(b)
| No | Description |
| The provisions of the Act shall not apply to the processing of personal data necessary for research, archiving and statistical purposes if the personal data is not to be used to take any decision specific to a data principal and such processing is carried on in accordance with the following standards namely:- | |
| (a) | Reasonable security safeguards to prevent personal data breach are in place to protect personal data in the possession or under control of the Data Fiduciary, including in respect of any processing undertaken by it or on its behalf by a data processor and |
| (b) | If such processing is for the purposes specified in column (2) of the table in Schedule V, the same is carried on in accordance with the requirements specified in column (3) there of |
Compliance Checklist — Rule 14 (Research & Statistical Exemption)
- Personal data is used strictly for research, archiving, or statistical purposes
- Processing does not result in decisions specific to any Data Principal
- Strong security safeguards are implemented to protect personal data
- Data is anonymized or minimized wherever possible
- Processing complies with conditions specified under Schedule V
- Proper documentation is maintained to justify exemption usage