Request a callback
DPDP Rules 2025 · Seventh Sch. · Sch.Upcoming · 13 May 2027

Seventh Schedule: Purposes for which the Central Government may call for information, and who may ask

Status
Upcoming
Applies from
13 May 2027Rule 1(4)
Penalty
Up to Rs 50 croreAct, Schedule, item 7
Binds
Every Data Fiduciary

In plain English

Three purposes and the officer authorised for each. Use of personal data by the State in the interest of sovereignty and integrity of India or security of the State: an officer notified under s. 17(2)(a) of the Act and designated by the Central Government or the head of the instrumentality. Use of personal data by the State to perform a function or make a disclosure required by law: the person authorised under that law. Assessing whether to notify a Data Fiduciary as a Significant Data Fiduciary: an officer in MeitY designated by its Secretary.

Rule 8(3) also points here: the one-year minimum retention of personal data and logs exists so that these requests can be answered.

What you must do

  • Verify that a request under Rule 23 comes from the officer this Schedule authorises for the stated purpose before releasing anything.

Gazette text · Seventh Schedule[See rule 23(1) and 8(3)]
  1. [See rule 23(1) and 8(3)]
Sl. No.EntryAuthorised person
1.Use, by the State or any of its instrumentalities, of personal data of a Data Principal in the interest of sovereignty and integrity of India or security of the State.Such officer of the State or of any of its instrumentalities notified under clause (a) of sub-section (2) of section 17 of the Act, as the Central Government or the head of such instrumentality, as the case may be, may designate in this behalf.
2.Use, by the State or any of its instrumentalities, of personal data of a Data Principal for the following purposes, namely: —
  1. (i)
    performance of any function under any law for the time being in force in India; or
  2. (ii)
    disclosure of any information for fulfilling any obligation under any law for the time being in force in India.
Person authorised under applicable law.
3.Carrying out assessment for notifying any Data Fiduciary or class of Data Fiduciaries as Significant Data Fiduciary.Such officer of the Central Government, in the Ministry of Electronics and Information Technology, as the Secretary in charge of the said Ministry may designate in this behalf.

Source: Gazette of India, G.S.R. 846(E), 13 Nov 2025 (MeitY copy)

Source: Gazette of India, G.S.R. 846(E), 13 Nov 2025 (MeitY copy) · Change log

Change log

4 Nov 2026 First version, with the text of the Gazette notification of 13 Nov 2025 and Infofacility's notes.