Section 29(3)(a) in The Credit Information Companies Rules, 2006
(a)the requirement that their employees, authorised personnel, agents, contractors and other persons who deal with or have right to access data, information and credit information comply with confidentiality obligation and sign covenants with them; and