1. The Controller may, after consultation with the Cyber Regulations Advisory Committee and with the previous approval of the Central Government, by notification in the Official Gazette, make regulations consistent with this Act and the rules made thereunder to carry out the purposes of this Act.
2. In particular, and without prejudice to the generality of the foregoing power, such regulations may provide for all or any of the following matters, namely:—
   1. the particulars relating to maintenance of data base containing the disclosure record of every Certifying Authority under clause (n) of section 18;
   2. the conditions and restrictions subject to which the Controller may recognise any foreign Certifying Authority under sub-section (1) of section 19;
   3. the terms and conditions subject to which a licence may be granted under section 21;
   4. other standards to be observed by a Certifying Authority under clause (d) of section 30;
   5. the manner in which the Certifying Authority shall disclose the matters specified in sub-section (1) of section 34;
   6. the particulars of statement which shall accompany the application under sub-section (3) of section 35;
   7. the manner in which the subscriber shall communicate the compromise of private key to the Certifying Authority under sub-section (2) of section 42.
3. Every regulation made under this Act shall be laid, as soon as may be after it is made, before each House of Parliament.