Information Technology (Preservation and Retention of Information by Intermediaries Providing Digital Locker Facilities) Rules, 2016
Show AI Summary
Digital Locker retention rules prescribe authority, provider obligations, consented URI access and mandatory security and audit requirements.
The rules create a Government administered Digital Locker system for preservation and retention of issuer issued electronic records, appointing a Digital Locker authority to license and manage service providers (portals, repositories, gateways) under DeitY technical standards. They set enrollment and operational protocols for subscribers, issuers and requesters (URI push/pull, consented access via gateways), require service provider compliance with authorising terms, mandate grievance officers, suspension/revocation procedures, subscriber credential duties, fee and portability rules, audit regimes with independent auditors, confidentiality protections, offsite backups, Indian data location, and adherence to prescribed security practices.