(l) the manner by which a data fiduciary shall notify the data principal regarding important operations in the processing of personal data under sub-section (2) of section 30; (m) the manner of periodic review of security safeguards to be undertaken by the data fiduciary and the data processor under sub-section (2) of section 31; (n) the circumstances or classes of data fiduciaries or processing operations where it is mandatory to carry out data protection impact assessments under sub-section (2) of section 33; (o) the instances where a data auditor under this Act shall be engaged by the data fiduciary to undertake a data protection impact assessment under sub-section (2) of section 33; (p) the manner in which the data fiduciary shall submit the data protection impact assessment to the Authority under sub-section (4) of section 33; (q) any aspect of processing for which records shall be maintained under clause (d) of sub-section (1) of section 34; (r) the form in which records shall be maintained under sub-section (2) of section 34; (s) the factors to be taken into consideration while evaluating the compliance of data fiduciaries with the provisions of this Act under sub-section (2) of section 35; (t) the form, manner and procedure by which data audits shall be conducted under sub-section (3) of section 35; (u) criteria on the basis of which rating in the form of a data trust score may be assigned to a data fiduciary under sub-section (6) of section 35; (v) theeligibility, qualifications and functions to be performed by data auditors under sub-section (4) of section 35; (w) the eligibility and qualification of a data protection officer under sub-section (3) of section 36; (x) the registration requirements of significant data fiduciaries under sub-section (2) of section 38; (y) themanner of certification and time period within which transfer of personal data shall be notified to the Authority under sub-section (6) of section 41; (z) the provisions of the Act which may be exempted for different categories of research, archival or statistical purposes under sub-section (1) of section 45; (aa) the remuneration, salary or allowances and other terms and conditions of service of such officers, employees, consultants and experts under sub-section (2) of section 56; (bb) any other fees and charges for carrying out purposes of this Act under clause (t) of sub-section (2) of Section 60; (cc) the manner in which information shall be provided to the authority by the data fiduciary under sub-section (3) of Section 63; and (dd) any other matter which is required to be, or may be specified,or in respect of which provision is to be or may be made by regulations. 109. Rules and Regulations to be laid before Parliament.— Every rule and regulation made under this Act shall be laid, as soon as may be after it is made, before each House of Parliament, while it is in session, for a total period of thirty days which may be comprised in one session or in two or more successive sessions, and if, before the expiry of the session immediately 59