Section 17(1)(d) in THE DIGITAL PERSONAL DATA PROTECTION ACT, 2023
(d)personal data of Data Principals not within the territory of India is processed pursuant to any contract entered into with any person outside the territory of India by any person based in India;