Section 43A of India's IT Rules 2011 Requires Which of the Following

Section 43A of India's IT Rules 2011 requires which of the following for a privacy policy?

A) It should be available and produced on request.
B) It should be published on the website of the body corporate.
C) It should be emailed or faxed to data providers by the body corporate.
D) It should be shown to the data provider at the time of data collection.