DPDP Act 2023 · Enforcement

Section 33: Penalty

What Section 33 says, in plain English

Penalty per the Schedule. Section 33(2) requires the Board to consider mitigation steps you took when deciding the amount.

What it means for you

Your mitigation record (breach playbook, DPIA, prompt notification, remedial action) directly affects the penalty. Keep receipts.

How this is operationalised in dcomply

Every module maintains an evidence trail (DPIA outputs, breach playbook rehearsals, notice versions, DSR responses). Section 33(2) mitigation review starts with pulling that trail together in one PDF.

Other sections in Enforcement

Section 27: Powers and functions of the Board Section 28: Procedure of the Board Section 29: Appeal Section 30: Orders of the Board Section 31: Alternate dispute resolution Section 32: Voluntary undertaking

Also useful

All 44 sections DPDP vs GDPR Scan your site Ask a DPO (free)

← Section 32: Voluntary undertaking All sections Section 34: Application of amounts →