Mitigation
How to reduce a penalty if a breach occurs.
🎯 Learning Objectives
- ▸ Understand what actions mitigate a penalty
- ▸ Build a mitigation strategy
The Mitigation Strategy
If a breach occurs, the worst thing you can do is hide it. The Board will penalize you severely for covering it up. Here is what you should do:
- • Immediately contain the breach.
- • Notify the Board and affected users without undue delay.
- • Conduct a thorough investigation.
- • Cooperate fully with the Board.
- • Implement corrective measures to prevent recurrence.
Prompt self-reporting and cooperation can significantly reduce the penalty amount.
📖 Glossary
- Mitigation
- Actions taken to reduce the severity or impact of a penalty or breach.
🔑 Key Takeaways
- Self-reporting a breach helps.
- Taking immediate remedial action helps.
- Cooperating with the Board helps.
📚 Further Reading
- DPDPA Section 33 — Government of India (2023)

Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...