Grievance Redressal Mechanism Under the DPDP Act, 2023

A right without a remedy is only half a protection. The DPDP Act ensures that individuals are not left without recourse when their personal data rights are violated.

The Act establishes a structured grievance redressal mechanism to handle complaints efficiently and transparently.

Step 1: Internal Complaint to the Data Fiduciary

When a Data Principal believes their rights have been violated, the first step is to approach the concerned Data Fiduciary.

This may involve issues such as:

• Unlawful processing of personal data

• Failure to obtain valid consent

• Delay in responding to data requests

• Refusal to correct or erase data

• Inadequate data security measures

The Data Fiduciary is expected to:

• Provide a clear grievance mechanism

• Acknowledge complaints

• Respond within a reasonable timeframe

• Attempt to resolve the issue internally

This step promotes self-regulation and reduces unnecessary escalation.

Step 2: Escalation to the Data Protection Board of India

If the complaint is not resolved satisfactorily, the Data Principal may approach the Data Protection Board of India (DPB).

The Board serves as the enforcement authority under the Act.

It has the power to:

• Examine complaints and reports of data breaches

• Conduct inquiries and investigations

• Seek information from Data Fiduciaries

• Issue directions to ensure compliance

• Impose monetary penalties where violations are established

• Order corrective measures

The Board ensures accountability and acts as an independent regulatory body.

Functions of the Data Protection Board

The Board plays a crucial role in:

• Enforcement of obligations under the Act

• Adjudication of data-related complaints

• Monitoring compliance

• Ensuring timely breach response

• Imposing deterrent penalties

Its authority strengthens the practical implementation of data protection rights.

Appeal Mechanism

Decisions of the Data Protection Board may be challenged before the appropriate appellate authority, ensuring judicial oversight and procedural fairness.

This layered structure ensures transparency and legal balance.

Importance of the Grievance Mechanism

The grievance redressal system:

✔ Strengthens individual rights

✔ Ensures accountability of organizations

✔ Promotes compliance culture

✔ Provides structured enforcement

✔ Builds trust in the digital economy

Without this mechanism, statutory rights would lack enforceability. The DPDP Act therefore integrates enforcement directly into its framework.