Under Section?72A, any person who discloses personal information obtained under lawful contract without permission is liable. This breach can attract imprisonment up to three years, a fine, or both. It helps protect contractual confidentiality, especially of user financial or personal data handled by service providers.
