Any person who, knowingly or intentionally—
- re-identifies personal data which has been de-identified by a data fiduciary or a data processor, as the case may be; or
- re-identifies and processes such personal data as mentioned in clause (a),without the consent of such data fiduciary or data processor, then, such person shall be punishable with imprisonment for a term not exceeding three years or with a fine which may extend to two lakh rupees or both.