Section 34(2) in The Information Technology (Certifying Authorities) Rules, 2000
(2)Paper based records, documentation and backup data containing all confidential information as prescribed in rule 33 shall be kept in secure and locked container or filing system, separately from all other records.
