THIRD SCHEDULE
[See
rule
8(1)]
|
S.
no. |
Class
of Data
Fiduciaries |
Purposes |
Time
period |
|
(1) |
(2) |
(3) |
(4) |
|
1. |
Data
Fiduciarywho
is an
e- commerce
entity
having
not less than
two crore registered
users
in India |
For
all
purposes,
except
for
(a) Enabling
the
Data
Principal
to access
her
user
account;
and
(b) Enabling
the
Data
Principal
to
access
any
virtual
token
that
is issued
by
or
on
behalf
of the
Data
Fiduciary,
is stored
on the
digital
facility
or
platform
of
such
Data
Fiduciary,
and
may
be
used
to
get
money,
goods
or services |
Three
years
from
the
date
on |
|
2. |
Data
Fiduciary |
For
all
purposes,
except
for
(a) Enabling
the
Data
Principal
to
access
her
user
account;
and
(b) Enabling
the
Data
Principal
to
access
any
virtual
token
that
is issued
by
or
on
behalf
of
the
Data
Fiduciary,
is stored
on
the
digital
facility
or platform
of such
Data
Fiduciary,
and
may
be
used
to get
money,
goods
or services |
Three
years
from
the
date
on |
|
3. |
Data
Fiduciary
who
is
a
social
media
intermediary
having
not
less than
two
crore registered
users
in India |
For
all
purposes,
except
forthe
following:
(a) Enabling
the
Data
Principal
to
access
her
user
account;
and
(b) Enabling
the
Data
Principal
to
access
any
virtual
token
that
is |
Three
years
from
the
date
onwhich
the
Data Principal
last approached
the
Data Fiduciary
for
the
performance
of
the
specified
purpose
or
exercise
of
her
rights,
or
the
commencement
of the
Digital
Personal
Data
Protection
Rules,
2025,
whichever
is |
Note:
In
this
Schedule,—
(a) “e-commerce
entity”
means
any
person
who
owns,
operates
or
manages
a
digital
facility
or
platform
for
e-commerce
as
defined
in the
Consumer
Protection
Act,
2019
(35
of
2019),
but
does
not
include
a seller
offering
her
goods
or
services
for
sale
on a
marketplace
e-commerce
entity
as
defined
in the
said
Act;
(b) “online
gaming
intermediary”
means
any
intermediary
who
enables
the
users
of
its
computer
resource
to
access
one
or
more
online
games;
(c) “social
media
intermediary”
means
an
intermediary
as
defined
in
the
Information
Technology
Act,
2000
(21
of
2000)
who
primarily
or
solely
enables
online
interaction
between
two or
more
users
and
allows
them
to
create,
upload,
share,
disseminate,
modify
or access
information
using
her services;
and
(d) “user”,
in relation
to—
(i)
an
e-commerce
entity,
means
any
person
who
accesses
or avails
any computer
resource
of
an
e-commerce
entity;
and
(ii)
an
online
gaming
intermediary
or a
social
media
intermediary,
means
any person
who
accesses
or
avails
of
any
computer
resource
of
an
intermediary
for
the
purpose
of
hosting,
publishing,
sharing,
transacting,
viewing,
displaying,
downloading
or uploading
information.