Section 12 in Telecom Commercial Communications Customer Preference Regulations, 2018
12.
Access Providers shall deploy, maintain and operate a system, by themselves or through delegation, to ensure that requisite functions are performed in a non-repudiable and immutable manner: -(1)to record preference(s), consent(s), revocation of consent(s), complaint(s) etc.(2)to carry out regulatory pre-checks and post-checks in respect of Commercial Communication being offered for delivery and also to keep records of actions performed;(3)to register person(s), business entity(ies) or legal entity(ies) in making Commercial Communication through its network involved from origination, transmission or delivery and have adequate documentary evidence in support to prove its identity;(4)to ensure that functions and actions performed by registered entities are identifiable, distinguishable and recordable;(5)to ensure that the data is stored and shared in a secure and safe manner;(6)to ensure that data is accessible only to the relevant entities for performing roles assigned to them under these regulations;Note: If not specifically permitted, the data should not be accessible in clear text to any person, including the person(s) operating the system or performing a delegated function, e.g. scrubbing, or accessible to any application(s) other than the application performing the delegated function(s).(7)to detect non-compliances and take immediate action to effectively ensure compliance with regulations;(8)to ensure compliance by the registered sender(s) who have notified the access provider about the use of auto dialer(s), and to take action against the sender(s) found to be failing to maintain silent calls or abandoned calls within the prescribed limits;
