DPDP reference

Section 15: Duties of Data Principal

Last checked 6 Nov 2026

A Data Principal must follow applicable laws when exercising her rights, must not impersonate another person, must not suppress material information when giving data for a document, identifier or proof issued by the State, must not register a false or frivolous grievance or complaint, and must give only verifiably authentic information when asking for correction or erasure.

Applies to
Individuals, in their role as Data Principals. No duty here falls on a business.
Starts
13 May 2027 (G.S.R. 843(E), item (c)).
Penalty
Up to ₹10,000 (s.33, Schedule item 5).
Source
Digital Personal Data Protection Act, 2023 (22 of 2023), section 15; G.S.R. 843(E), commencement

Questions

Can an individual be penalised under the DPDP Act?

Yes. Breach of a Data Principal's duties under s.15 carries a penalty that may extend to ten thousand rupees (Schedule item 5).

Related

Next

Join early access

Not legal advice.