DPDP reference

Section 39: Bar of jurisdiction

Last checked 6 Nov 2026

No civil court may entertain a suit or proceeding on a matter the Board is empowered to decide, and no court or other authority may grant an injunction against action taken or to be taken under the Act.

Applies to
Anyone with a dispute the Board can decide.
Starts
13 Nov 2025, in force (G.S.R. 843(E), item (a)).
Penalty
None of its own. This section sets out how the law works and places no duty on a business.
Source
Digital Personal Data Protection Act, 2023 (22 of 2023), section 39; G.S.R. 843(E), commencement

Questions

Can a person sue in a civil court for a DPDP breach?

Not on a matter the Board is empowered to decide (s.39). The route runs through the Data Fiduciary's grievance system, the Board and the Appellate Tribunal.

Related

Next

Join early access

Not legal advice.