(1) Every person shall have the right to keep his personal data or details confidential.
(2) When collecting personal or family data of any person, his/her consent should be obtained.
(3) According to sub-section (2), the data collected by the public body or organized organization with the consent of the concerned person shall be used only for the purpose for which it was collected. However, if any data is requested for the purpose of national security or law and order, it shall not be considered as an obstacle to provide such data in accordance with the prevailing law.
(4) No person shall, without obtaining the consent of any person, give or cause to be made public the following data relating to him to any other person:-
(a) Details regarding medical examination,
(b) Statement of assets and income,
(c) employment details,
(d) Details relating to family matters,
(e) Biological details and Lapche typographical,
(f) signature or electronic signature,
(g) Political Affiliation and Electoral Details,
(h) particulars relating to business or dealings.
(5) Notwithstanding anything written in sub-section (4), in the course of the investigation of any criminal offence, if any personal data or details are required to be provided to a court or an authorized body or official according to law, such data or details shall be provided.
(6) Regardless of what is written in sub-section (4), if the authorized officer demands a question about a person's age, qualification, character, sexuality, disability, etc., the concerned person shall provide such details or documents.