Lesson 9.4: Voluntary undertakings

Module 9 · Lesson 9.4 of 6 · About 30 minutes · Voluntary undertakings

A way to resolve a matter without a penalty. This DPDPA 2023 course page explains voluntary undertakings in plain language.

voluntary undertakings - DPDPA 2023 course lesson banner

What you will learn about voluntary undertakings

Explain a voluntary undertaking
Know its effects
Decide when it fits

Section 32 (voluntary undertakings)

At any stage of a proceeding, the Board may accept a voluntary undertaking from a person about compliance. Acceptance can bar further proceedings on the matter. Breach of the undertaking can lead to action as for a breach of the Act.

Undertaking path

Select a numbered box to read more.

Tap or click a step to see exactly what to do.

When it helps (voluntary undertakings)

Situation	Fit
You found the issue yourself	Good
You are cooperating	Good
Deliberate harm	Poor

Worked example

A firm discovers its retention failure, offers an undertaking to delete old data and report in 60 days, and the Board accepts.

Activity (5 minutes) (voluntary undertakings)

Think of one problem you could fix early and document.

Key takeaway: Early, honest action keeps options open.

Check your understanding of voluntary undertakings

Q1. An undertaking is offered to:

Q2. Accepting can:

Q3. Breach of an undertaking:

← Penalties and how they are decided Appeals and alternative dispute resolution →

Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.

Official sources for voluntary undertakings: Digital Personal Data Protection Rules, 2025 (MeitY, PDF) and DPDP Rules 2025, English text (PDF). Always check the latest official notifications.