Section 36(2) in The Credit Information Companies (Regulation) Act, 2005
(2)In particular, and without prejudice to the generality of the foregoing powers, such rules may provide for all or any of the following matters, namely:—(a)the authority or tribunal which may be designated under sub-section (1) of section 7;(b)the steps to be taken by every credit information company or credit institution and specified user for ensuring accuracy, completeness of data and protection of data from any loss or unauthorised access or use or disclosure under section 19;(c)the form in which a declaration of fidelity and secrecy shall be made under sub-section (2) of section 29;(d)any other matter which is required to be, or may be, prescribed.
