Data Protection Board and Enforcement: current Indian law, practical example, evidence checklist, risks and Finin2min summary.
The Board is digital by design and can inquire into breaches and non-compliance, issue directions and impose penalties under the statutory framework.
DPDP Act ss.18–34; DPDP Rules
The legal conclusion must be read with the current rules, notifications, portal instructions and binding judgments applicable to the event date.
Identify the person, activity, location, transaction date, threshold and regulator before applying the rule.
Separate mandatory legal conditions from portal fields, industry practice and contractual preference.
Link each conclusion to contemporaneous documents, approvals, filings and accounting records.
Establish authorised receipt, preservation and response governance.
An organisation receives an electronic Board communication.
Decision point: Reperform the analysis if a material fact, date, location or legal status changes.
Treating it as ordinary customer support correspondence can harm response rights.
Additional risks include stale source use, incomplete authority, inconsistent portal data, weak contemporaneous evidence and failure to consider linked tax, accounting, contract or sector rules.
| Stage | Control | Output |
|---|---|---|
| Facts | Freeze transaction, party, date and location | Fact sheet |
| Law | Read Act, Rules and later instruments | Legal map |
| Evidence | Reconcile filings, books and documents | Evidence index |
| Decision | Approve, remediate, disclose or escalate | Signed action note |
The Board is digital by design and can inquire into breaches and non-compliance, issue directions and impose penalties under the statutory framework.
DPDP Act ss.18–34; DPDP Rules
data inventory and processing register, privacy notice and consent artefacts, processor contracts and security schedules.
Establish authorised receipt, preservation and response governance.
MeitY
Source reviewed 4 July 2026
MeitY
Source reviewed 4 July 2026
MeitY
Source reviewed 4 July 2026
Law, portal and source review: 4 July 2026. Case law and transaction-specific conditions should be checked immediately before professional reliance.