Regulation-making power requires consultation, prior approval, statutory consistency, and parliamentary scrutiny for digital certification compliance.

Section 89 authorises the Controller to make regulations, after advisory consultation, prior Central Government approval, Gazette publication, and consistency with the Act and rules. The regulatory power covers Certifying Authority disclosure records, foreign recognition, licence conditions, standards, disclosures, application statements, and private-key compromise communication. Regulations must be laid before both Houses of Parliament, which may modify or annul them without affecting earlier actions taken under them.

---

---

---