Section 8(5) in THE DIGITAL PERSONAL DATA PROTECTION ACT, 2023
(5)A Data Fiduciary shall protect personal data in its possession or under its control, including in respect of any processing undertaken by it or on its behalf by a Data Processor, by taking reasonable security safeguards to prevent personal data breach.
