Section 32(2) in The Information Technology (Certifying Authorities) Rules, 2000
(2)The auditor and the Certifying Authority shall not have any current or planned financial, legal or other relationship, other than that of an auditor and the audited party.
