Section 17(2) in THE DIGITAL PERSONAL DATA PROTECTION ACT, 2023
(2)The provisions of this Act shall not apply in respect of the processing of personal data—(a)by such instrumentality of the State as the Central Government may notify, in the interests of sovereignty and integrity of India, security of the State, friendly relations with foreign States, maintenance of public order or preventing incitement to any cognizable offence relating to any of these, and the processing by the Central Government of any personal data that such instrumentality may furnish to it; and Processing of personal data outside India.(b)necessary for research, archiving or statistical purposes if the personal data is not to be used to take any decision specific to a Data Principal and such processing is carried on in accordance with such standards as may be prescribed.
