Section 13(3) in The Information Technology (Procedure and Safeguards for Interception, Monitoring and Decryption of Information) Rules, 2009
(3)Any direction of decryption of information issued under rule 3 to intermediary shall be limited to the extent the information is encrypted by the intermediary or the intermediary has control over the decryption key.
