(1) The Controller may, after consultation with the Cyber Regulations Advisory Committee and with the previous approval of the Central Government, by notification in the Official Gazette, make regulations consistent with this Act and the rules made thereunder to carry out the purposes of this Act.
(2) In particular, and without prejudice to the generality of the foregoing power, such regulations may provide for all or any of the technical and operational standards under this Act.
(3) Every regulation made under this Act shall be laid, as soon as may be after it is made, before each House of Parliament.
Legal Commentary & Landmark Judgments: Section 89
Section 89 confers regulatory power upon the Controller of Certifying Authorities to make regulations consistent with the Act and rules, with the prior approval of the Central Government, establishing operational standards for Certifying Authorities and public key infrastructure.
When advising Certifying Authorities on cryptographic compliance, treat CCA regulations framed under Section 89 as binding statutory law; non-compliance provides immediate legal grounds for license suspension under Section 25.