Section 11(2) in The Credit Information Companies Regulations, 2006
(2)Manner and purpose of collection of personal data .-No credit institution or credit information company, or specified user, as the case may be, shall collect, or publish or disclose, personal data except for the purposes relating to their functions:(a)as per the provisions of the Act, or their activities incidental or relating to their such functions; or(b)in relation to their capacity and function as an employer of an individual who is or has been in their employment.
