1. The Central Government may, by notification in the Official Gazette and in the Electronic Gazette, make rules to carry out the provisions of this Act.
2. In particular, and without prejudice to the generality of the foregoing power, such rules may provide for all or any of the following matters, namely:—
   1. the conditions for considering reliability of electronic signature or electronic authentication technique under sub-section (2) of section 3A;
   2. the manner and format in which electronic records shall be filed or issued and the fee or charges for the receipt under sub-section (2) of section 6;
   3. the manner in which the authorised service provider may collect, retain and appropriate service charges under sub-section (2) of section 6A;
   4. the matters relating to the type of electronic signature, manner and format in which it may be affixed and the procedure to identify the person affixing the signature under section 10;
   5. the security procedures and practices under section 16;
   6. the qualifications, experience and terms and conditions of service of Controller, Deputy Controllers and Assistant Controllers under sub-section (4) of section 17;
   7. the standards to be observed by the Controller under clause (b) of sub-section (2) of section 20;
   8. the period of validity of the licence under clause (a) of sub-section (2) of section 21;
   9. the form in which an application for licence may be made under sub-section (1) of section 22;
   10. the amount of fees payable under clause (c) of sub-section (2) of section 22;
   11. such other documents which shall accompany an application for licence under clause (d) of sub-section (2) of section 22;
   12. the form and the fee for renewal of a licence under section 23;
   13. the form of Electronic Signature Certificate and the fee for issuance thereof under section 35;
   14. the form of application and fee for issue of Electronic Signature Certificate under section 35;
   15. the duties of subscribers under section 40 and section 41;
   16. the reasonable security practices and procedures and sensitive personal data or information under section 43A;
   17. the procedure and safeguards for interception, monitoring or decryption under sub-section (2) of section 69;
   18. the procedure and safeguards for blocking for access by public under sub-section (2) of section 69A;
   19. the procedure and safeguards for monitoring and collecting traffic data or information under sub-section (3) of section 69B;
   20. the information security practices and procedures for protected system under section 70;
   21. the manner of performing functions and duties of the agency under sub-section (5) of section 70B;
   22. salary and allowances and the terms and conditions of service of the Director General and other officers and employees under sub-section (3) of section 70B;
   23. the other functions of the agency to be specified under clause (f) of sub-section (4) of section 70B;
   24. the information and the duration for which it is to be retained and the manner of retaining it under section 67C;
   25. the manner of encryption under section 84A;
   26. any other matter which is required to be, or may be, prescribed.
3. Every rule made by the Central Government under this Act shall be laid, as soon as may be after it is made, before each House of Parliament, while it is in session, for a total period of thirty days which may be comprised in one session or in two or more successive sessions.