Section 30(1) in Insolvency and Bankruptcy Board of India (Information Utilities) Regulations, 2017
(1)An information utility shall-(a)provide services to a user based on its explicit consent;(b)guarantee protection of the rights of users;(c)establish adequate procedures and facilities to ensure that its records are protected against loss or destruction;(d)adopt secure systems for information flows;(e)protect its data processing systems against unauthorised access, alteration, destruction, disclosure or dissemination of information; and(f)transfer all the information submitted by a user, and stored with it to another information utility on the request of the user.
