Back to Module
5 of 9|Data Protection Board
reading 15 min•Board Proceedings
Orders
What can the Board order a company to do?
🎯 Learning Objectives
- ▸ Understand the types of orders the Board can issue
- ▸ Analyze the distinction between remedial and penal orders
Types of Orders
When the Board finds a violation, it can issue various orders:
- • Remedial Orders: Direct the Data Fiduciary to take specific actions (e.g., "delete the user's data immediately").
- • Penalty Orders: Impose a financial penalty as per the Schedule of the Act.
- • Compensation Orders: Direct the Data Fiduciary to pay compensation to the affected Data Principal.
📖 Glossary
- Remedial Order
- An order that requires a party to fix a problem or undo a harm.
🔑 Key Takeaways
- The Board can order a company to fix its processes.
- The Board can impose civil penalties up to ₹250 crore.
- The Board can order compensation to the affected user.
📚 Further Reading
- DPDPA Section 27 — Government of India (2023)
Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...