(z) the qualifications, appointment, term of office, salaries and allowances, resignation, removal and the other terms and conditions of service of the chairperson and any member of the Appellate Tribunal under sub-section (1) of section 80; (aa) the procedure of filling of vacancies in the Appellate Tribunal under section 81; (bb) the salaries and allowances and other conditions of service of the officers and employees of the Appellate Tribunal under sub-section (3) of section 82; (cc) the form, manner and fee for filing an appeal or application, as the case may be, with the Appellate Tribunal under sub-section (1) of section 84; and (dd) other matters under clause (i) of sub-section (2) of section 85 in respect of which the Appellate Tribunal shall have powers under the Code of Civil Procedure, 1908 (5 of 1908) that are vested in a civil court while trying a suit. 108. Power to make regulations. — (1) The Authority may, by notification, make regulations consistent with this Act and the rules prescribed thereunder to carry out the purposes of this Act. (2) In particular and without prejudice to the generality of the foregoing power, such regulations may provide for all or any of the following matters, namely: (a) (b) (c) (d) (e) (f) (g) (h) (i) (j) (k) information required to be provided by the data fiduciary to the data principal in its notice under clause (n) of sub-section (1) of section 8; manner in which the personal data retained by the data fiduciary must be deleted under sub-section (4) of section 10; reasonable purposes for which personal data may be processed in accordance with sub-section (2) of section17; safeguards as may be appropriate for protecting the rights of data principals under sub-section (3) of section17; any further categories of sensitive personal data and further grounds on which such data may be processed under sub-section (1) of section 22; such additional safeguards or restrictions applicable to processing of sensitive personal data and any further categories of personal data where there is repeated, continuous, systematic collection for the purposes of profiling and such additional safeguards required under sub-section (3) of section 22; theadditional factors necessary for determining the appropriateness of age verification mechanisms to be incorporated by a data fiduciary processing the personal data and sensitive personal data of children under sub-section (3) of section 23; practices that may be undertaken by data fiduciaries offering counseling or child protection services under sub-section (6) of section 23; the time period within which a data fiduciary must comply with a request made under sub-section (3) of section 28; the time period within which a data principal may file a complaint under subsection (4) of section 28; the form in which the data fiduciary is required to make available to the data principal information under sub-section (1) of section 30; 58