https://www.taxtmi.com/notifications?id=147183 Body corporates handling sensitive personal data or information must publish a privacy policy, obtain written consent before collection, collect data only for a lawful and necessary purpose, provide collection notices, limit retention and use, and permit review and feasible correction. Third-party disclosure generally requires prior permission, subject to contractual, legal, government-agency, and lawful-order exceptions. Transfers require equivalent data protection and contractual necessity or consent. Reasonable security practices require documented information-security controls, with regular independent certification or audit. en-us Mon, 11 Apr 2011 00:00:00 +0530 Tue, 06 Oct 2026 12:18:14 +0530 TaxTMI RSS Generator https://www.taxtmi.com/notifications?id=147183 Body corporates handling sensitive personal data or information must publish a privacy policy, obtain written consent before collection, collect data only for a lawful and necessary purpose, provide collection notices, limit retention and use, and permit review and feasible correction. Third-party disclosure generally requires prior permission, subject to contractual, legal, government-agency, and lawful-order exceptions. Transfers require equivalent data protection and contractual necessity or consent. Reasonable security practices require documented information-security controls, with regular independent certification or audit. Notifications Indian Laws Mon, 11 Apr 2011 00:00:00 +0530 https://www.taxtmi.com/notifications?id=147183