Section 43A(iii) in The Information Technology Act, 2000
(iii)"sensitive personal data or information" means such personal information as may be prescribed by the Central Government in consultation with such professional bodies or associations as it may deem fit.
