Module 9: Enforcement & Penalties
How the Data Protection Board works, the penalty schedule, voluntary undertakings, and how to prepare for an inquiry. This DPDPA 2023 course page explains enforcement and penalties in plain language.
'%2F%3E%3Ccircle%20cx%3D'650'%20cy%3D'15'%20r%3D'62'%20fill%3D'%2314b8a6'%20opacity%3D'.35'%2F%3E%3Ctext%20x%3D'28'%20y%3D'54'%20font-family%3D'Poppins%2CArial%2Csans-serif'%20font-size%3D'26'%20font-weight%3D'800'%20fill%3D'white'%3EDPDPA%202023%20COURSE%3C%2Ftext%3E%3C%2Fsvg%3E)
Module 9 lessons (about 3 hours) (enforcement and penalties)
Read the lessons in order, like chapters of a book. Each has reading, a click-through diagram, an activity and a quiz.
What you will learn about enforcement and penalties
- Describe the Board’s role and process
- Recall the maximum penalties
- Use voluntary undertakings
- Prepare an evidence file
The Data Protection Board of India
A digital-first body that receives complaints and breach reports, holds inquiries, can direct urgent remedial measures and impose penalties after a hearing. Appeals go to the Telecom Disputes Settlement and Appellate Tribunal (TDSAT), generally within 60 days.
Penalty schedule (maximum) (enforcement and penalties)
| Breach | Up to |
|---|---|
| Failure to take reasonable security safeguards | ₹250 crore |
| Failure to notify a breach | ₹200 crore |
| Breach of children’s obligations | ₹200 crore |
| Breach of additional SDF obligations | ₹150 crore |
| Breach of duties by a Data Principal | ₹10,000 |
| Any other provision | ₹50 crore |
Voluntary undertaking (Section 32)
A fiduciary can offer a voluntary undertaking at any stage; if accepted, proceedings on that matter can be closed.
Preparing evidence (enforcement and penalties)
Keep the notice versions, consent logs, risk assessments, vendor contracts, breach register and training records ready in one folder.
Penalties scale with the type of failure, so prioritise security and breach readiness first.
Check your understanding of enforcement and penalties
Q1. Who inquires into breaches and imposes penalties?
Q2. Appeals against Board orders go to…
Q3. Maximum penalty for breaching children’s obligations?
Quick FAQs
Is there criminal punishment?
The Act relies on monetary penalties, not imprisonment.
Can we get compensation for individuals?
The Act does not create a statutory compensation right; penalties go to the Government.
Do it yourself: practical guides (enforcement and penalties)
Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.