Legal Liability
Understanding the overall legal liability of a Data Principal.
🎯 Learning Objectives
- ▸ Understand the civil liabilities of Data Principals
- ▸ Analyze the intersection with other laws
Rights and Responsibilities
The DPDPA is a balanced law. While it grants you extensive rights, it also expects you to behave responsibly. You cannot use the right to access or erasure to defraud a company, evade taxes, or destroy evidence.
If a Data Principal breaches these duties, they can be held liable by the Data Protection Board.
📖 Glossary
- Civil Liability
- The legal responsibility for one's acts or omissions that can result in financial penalties or compensation.
🔑 Key Takeaways
- Data Principals can be penalized for breaching duties.
- The DPDPA does not override criminal law.
- Rights and duties go hand in hand.
📚 Further Reading
- DPDPA Section 15 — Government of India (2023)

Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...