Section 20(2) in Information Technology (Preservation and Retention of Information by Intermediaries Providing Digital Locker Facilities) Rules, 2016
(2)Access to confidential information by the employees of the Digital Locker service provider shall be on a "need-to-know" and "need-to-use" basis. The process of maintaining confidentiality of information has to be included in the Digital Locker Practise Statement.
