The blog

Compliance, written by the section number.

What Indian statute actually requires of a small business — not a summary of a summary.

Check your DPDP readiness — free

Latest posts

Every post names the Act and the section it is about.

  • How Section 139 Governs Auditor Appointments and the Cost of Non‑Compliance — Missing any step in the auditor appointment timeline under Section 139 can attract a company fine of ₹25,000‑₹5 lakh and personal penalties of ₹10,000‑₹1 lakh per officer, plus late filing fees.
  • Missing the AGM deadline can cost a small business up to ₹1 lakh plus daily fines — If a company fails to hold its annual general meeting by the statutory six‑month deadline, the firm and each defaulting officer face a fine of up to ₹1 lakh and an additional ₹5 000 for every day the breach continues, plus delayed statutory filings.
  • Five‑Year Director Ban When Companies Miss Filings — If a company fails to file its financial statements or annual returns for three straight years, every current or former director faces a five‑year disqualification from any board, costing lost opportunities and potential fines for acting while disqualified.
  • How Section 454 Lets You Dodge Late Filing Penalties — Filing a delayed AOC‑4 or MGT‑7 within thirty days of the ROC notice avoids the penalty, though the filing fee still applies, saving businesses up to five lakh rupees in fines.
  • Understanding GST Appeal Rules: Time Limits, Pre‑Deposit and Hearing Costs — Filing a GST appeal under Section 107 costs you up to three months (plus a possible extra month for sufficient cause) from the communication of the order, a pre‑deposit of the admitted tax, interest, fine and penalty plus 10% of the disputed tax, and it automatically stays recovery of the balance, affecting cash flow and compliance timelines.
  • Understanding GST Demand Notices under Section 74A and Their Cost — Section 74A limits the window for GST demands from FY 2024-25 to 42 months, sets a 12‑month decision period and imposes a penalty of the higher of 10% of tax or ₹10,000, which can be avoided by paying tax and interest within 60 days of the notice.
  • Understanding the GST Annual Return Filing Requirement — Missing the GSTR‑9 deadline triggers daily penalties and after three years filing is barred, costing businesses both cash and compliance risk
  • Understanding Gratuity under Section 53 of the Code on Social Security — Section 53 sets the gratuity formula, the five‑year service rule and the ₹20 lakh cap, meaning small firms must budget a predictable lump‑sum cost when staff leave or die.
  • Understanding the 50% Wage Rule and Its Cost to Small Businesses — The 50% rule can increase the wage base for PF and gratuity calculations, raising compliance costs when excluded allowances exceed half of total remuneration
  • Salary payment deadlines under the Code on Wages — Section 17 forces monthly salaries to be paid by the seventh of the next month and exit wages within two working days, raising compliance costs for late payroll and quick final settlements.
  • Understanding Section 18 of the MSMED Act and Its Cost to Buyers — Challenging an award under Section 18 requires a buyer to deposit 75% of the awarded sum before a court will even consider setting it aside, turning a simple dispute into a costly financial commitment for the buyer.
  • Understanding GST Input Tax Credit Deadlines and Conditions — Missing the 30 November deadline or the 180‑day payment rule can force you to repay the credit with interest, eroding cash flow and increasing tax liability for Indian small businesses.
  • Step‑by‑Step Guide to Legitimate Employee Data Processing under DPDP — Section 7(i) lets employers process staff data for employment and loss‑prevention without consent, but the rest of the Act’s duties still apply, creating a clear compliance checklist.
  • Step‑by‑step guide to meeting DPDP consent rules — A practical walkthrough shows how a business must obtain, record and withdraw consent under the DPDP Act, and the cost of non‑compliance when consent is invalid or not withdrawn correctly
  • Step‑by‑step guide to creating a DPDP Section 5 consent notice — A compliant notice avoids unlawful processing and the heavy penalties that can reach hundreds of crores under the DPDP Act
  • Step‑by‑step guide to meeting DPDP data‑processing grounds — The DPDP Act allows processing only on consent or a listed legitimate use; failing to secure one of these grounds can trigger a breach penalty, costing businesses both fines and reputational damage.
  • How to Meet DPDP Section 33 Requirements and Avoid Penalties — Section 33 lets the Board set penalties up to ₹250 crore based on breach severity, so businesses must follow a clear step‑by‑step process to document safeguards, breach response and notification to keep penalties low.
  • How to Secure a Voluntary Undertaking under DPDP — A voluntary undertaking stops a DPDP Board proceeding while it lasts, but only if the business follows the agreed steps, documents everything and can produce proof if the Board asks for it later.
  • How to Apply DPDP Section 17 Exemptions in Your Business — Section 17 offers limited, situation‑specific relief from parts of the DPDP Act; businesses must map each exemption, document the scope, and keep records ready for regulator review, otherwise they bear the full compliance cost.
  • Step‑by‑step guide to setting up a DPDP grievance contact — Failing to publish a working grievance contact breaches Section 8(10) of the DPDP Act and can push a data principal straight to the Board, exposing a business to regulatory scrutiny and possible penalties.
  • Practical steps for businesses to meet Data Principal duties — Businesses must follow a clear process when a data principal exercises rights, ensuring compliance with Section 15 of the DPDP Act and avoiding penalties of up to ₹10,000 for false complaints or misuse of information
  • Step‑by‑Step Guide to Setting Up a Data Nomination Process for Your Business — Without a recorded nomination the data rights die with the principal, leaving the firm exposed to compliance risk and potential complaints, so a clear process is essential to keep the rights survivable and avoid regulatory gaps.
  • How to Build a Compliant DPDP Grievance Process — A functional grievance channel keeps complaints inside the firm, avoids Board escalation and saves the cost of legal defence, audit and reputational damage under the Digital Personal Data Protection Act.
  • How to Process Data Correction and Deletion Requests Efficiently — Failure to act on a valid correction or erasure request breaches the DPDP Act, exposing the business to penalties and the need to justify any retained data under law.
  • How Small Firms Can Meet DPDP Section 11 Requests — Section 11 of the DPDP Act forces businesses to answer access, correction, erasure and nomination requests within a statutory timeline, otherwise a Data Protection Board complaint can be lodged, exposing the firm to enforcement action and reputational loss.
  • Step‑by‑step guide to meeting Significant Data Fiduciary duties — Complying with Section 10 of the DPDP Act means appointing an India‑based DPO, hiring an independent auditor, and carrying out periodic impact assessments and audits, with non‑compliance attracting penalties up to ₹150 crore under the Schedule.
  • Step‑by‑step guide to filing the MGT‑7 annual return — A missed deadline on the MGT‑7 can cost a company ₹10,000 plus ₹100 per day, up to ₹2,00,000, and the same daily charge for each officer, capped at ₹50,000 each, so timely compliance saves money and avoids personal liability.
  • Step‑by‑step guide to filing on time to avoid runaway fees — Late filing under Section 403 adds ₹100 for each day a form is overdue, with no ceiling, so a dormant company can accrue thousands of rupees before the form is finally lodged, hurting cash flow and creditworthiness.
  • Step‑by‑step guide to filing AOC‑4 financial statements within 30 days — Missing the 30‑day deadline for filing the AOC‑4 financial statement can cost a company up to ₹2 lakh and its senior officers up to ₹50,000, plus daily fines that add up quickly if the delay continues.
  • Step‑by‑step guide to handling GST late payment interest — Section 50 of the CGST Act imposes interest at 18% per annum on any GST that is paid after the due date, and also on wrongly claimed input tax credit that has been used, so businesses must track dates, calculate interest and keep records to avoid additional costs.
  • How to Manage GST Late Fee Compliance Step by Step — Missing a GST return deadline triggers a daily ₹100 fee per Act, capped at ₹5,000 for periodic returns, and the real cost is usually double because the State law mirrors the central provision.
  • Step‑by‑step guide to drafting a valid arbitration agreement — A missing or poorly drafted arbitration clause can force a small business into costly court battles, so following the writing rules saves time, legal fees and the risk of unenforceable arbitration.
  • POSH Act annual report: why missing it costs up to ₹50,000 — The POSH Act obliges every Internal Committee to file an annual report each year, even with no complaints, and failure can attract a fine of up to fifty thousand rupees, plus harsher penalties for repeat offences.
  • Voluntary Undertaking under DPDP Act: How it Stops Proceedings — Accepting a voluntary undertaking from the Data Protection Board bars any further action under the Act for the covered matter, saving the business the full cost of a penalty or protracted litigation as long as the terms are honoured
  • Understanding DPDP Act Section 17 Exemptions for Indian Businesses — Section 17 of the Digital Personal Data Protection Act offers limited, situation‑specific relief, switching off only named provisions for certain processing activities and for notified start‑ups, so firms must map exactly which obligations are lifted and which remain in force.
  • Data Principal duties under DPDP Act and the ₹10,000 penalty — Section 15 of the Digital Personal Data Protection Act makes the data subject responsible for lawful conduct when exercising rights, and a false or frivolous grievance can attract a penalty of up to ten thousand rupees, the only individual‑focused sanction in the schedule.
  • Why Your Business Needs a Data Nomination Plan — Without a valid nominee, a data principal's rights under the DPDP Act die with them, costing businesses lost compliance and potential disputes over data access, correction or erasure.
  • Why a Working Grievance Channel Saves Money Under DPDP Act — A functional grievance redressal system keeps complaints inside the business, avoiding costly Board referrals and penalties, and ensures the response time set by the Rules is met.
  • Data Subjects Can Demand Correction, Completion and Deletion of Their Data — Refusing a valid correction or erasure request breaches the Act and can lead to penalties, while retaining data without a legal basis adds compliance risk and potential fines.
  • Significant Data Fiduciary duties under India’s DPDP Act — Section 10 of the Digital Personal Data Protection Act makes additional compliance obligations for entities the government labels as Significant Data Fiduciaries, and breaches can attract penalties up to the schedule ceiling of ₹150 crore.
  • Child Data Rules under DPDP Act and the ₹200 Crore Penalty — Section 9 of the Digital Personal Data Protection Act forces businesses to obtain verifiable parental consent before handling a child’s data and bans tracking, behavioural monitoring and targeted ads, with non‑compliance attracting a schedule ceiling of up to ₹200 crore.
  • When Employers Can Process Staff Data Without Consent Under DPDP Act — Section 7(i) of the Digital Personal Data Protection Act lets a data fiduciary handle employee information for genuine employment purposes or to protect the business from loss, removing the need for consent but still obliging the employer to meet security, accuracy and breach‑notification duties, so the cost is limited relief, not a free‑pass for all staff data use.
  • Understanding the Two Only Grounds for Processing Personal Data — Section 4 limits data processing to either consent or a listed legitimate use, meaning any other basis is a breach that can cost a small business heavy penalties.
  • Late payments to MSME suppliers trigger tax disallowance — If a business does not settle dues to a registered micro or small enterprise within the statutory 45‑day (or 15‑day without contract) window, the amount is added back to taxable profit at year‑end, removing the deduction and increasing income‑tax liability.
  • Understanding the Writing Requirement for Arbitration Agreements — Section 7 of the Arbitration and Conciliation Act mandates that arbitration agreements be in writing, and a mere venue clause does not satisfy the requirement, costing businesses delays and extra litigation if ignored
  • Cost of Ignoring Internal Committee Rules Under POSH Act — Failing to set up an Internal Committee or file the required annual report can attract a fine of up to fifty thousand rupees and, on repeat, double the penalty plus possible licence cancellation, threatening a small business’s ability to operate.
  • Understanding Section 73 Compensation for Breach of Contract — Section 73 limits recoverable damages to losses that naturally flow from a breach or were foreseen by the parties, excluding remote or indirect losses and reducing awards where the injured party failed to mitigate.
  • Understanding Section 27: Why Indian Non‑Compete Clauses are Usually Void — Section 27 renders post‑employment non‑compete clauses void, meaning any such restraint is unenforceable and brings no legal protection, while the rest of the contract may still stand, costing businesses the illusion of enforceability and potentially wasting drafting resources.
  • Understanding DPDP Act Section 33 Penalties for Data Breaches — Section 33 of the Digital Personal Data Protection Act lets the Data Protection Board set monetary penalties up to a ceiling of ₹250 crore for serious security‑safeguard failures, with lower caps for other breaches, meaning the actual cost depends on the Board’s assessment of each case.
  • What Indian Data Fiducaries Must Do Under DPDP Act Section 8 — Failure to meet these duties can attract scheduled penalties, including fines for inadequate security and for not reporting breaches, making non‑compliance a costly risk for small businesses.
  • Why Publishing a Data Grievance Contact Matters for Indian Businesses — Sections 8(9), 8(10) and 13 of the DPDP Act force every data‑fiduciary to display a working grievance contact and to answer complaints within the time the Rules set, otherwise the firm breaches section 8(10) and faces regulator scrutiny and possible penalties.
  • Understanding Data Principal Rights under the DPDP Act for Small Businesses — Section 11 of the Digital Personal Data Protection Act gives individuals the right to access, correct, erase, and nominate a representative for their data, and failure to comply can lead to a complaint with the Data Protection Board, costing time and reputation.
  • Understanding Valid Consent and Withdrawal under India's DPDP Act — Section 6 of the Digital Personal Data Protection Act requires consent to be free, specific, informed and unambiguous, and forces businesses to make withdrawal as easy as giving consent, otherwise processing becomes unlawful and may lead to costly penalties and data‑deletion obligations.
  • Why a Separate DPDP Consent Notice Is Mandatory for Indian Businesses — Failing to give a clear, stand‑alone consent notice before collecting personal data makes the processing unlawful and can trigger hefty penalties under the DPDP Act, costing businesses both financially and reputationally.
  • Late filing of AOC‑4 under Section 137: penalties for companies and officers — Section 137 forces a company to file its audited financial statements within thirty days of the AGM, and missing the deadline triggers a base fine of ten thousand rupees plus a daily charge of one hundred rupees, climbing to two lakh for the firm and fifty thousand for the responsible directors.
  • Late filing of MGT‑7 annual return: penalties and common mistakes — Section 92 of the Companies Act makes filing the MGT‑7 return within sixty days of the AGM mandatory, and a missed deadline triggers a base fine of ₹10,000 for the company and each officer plus ₹100 per day, capped at ₹2,00,000 for the firm and ₹50,000 per officer, a cost that can quickly erode small‑business cash flow.
  • Understanding GST Late Fees and Their Impact on Your Business — Late filing of GST returns incurs a daily fee of ₹100 per return, capped at ₹5,000, with additional charges under the State law that effectively double the cost.
  • Late GST payment interest under Section 50 and its cost — Section 50 of the CGST Act imposes interest of 18% per annum on tax paid after the due date, and the same 18% on input tax credit wrongly availed and used, turning delayed payments into a measurable financial burden for businesses.
  • Unstamped Agreements: Valid but Inadmissible Until Stamped — Section 35 of the Indian Stamp Act makes an unstamped contract admissible in court only after the stamp duty shortfall and a penalty of up to ten times that shortfall are paid, meaning the cost of curing the defect can be far higher than stamping at execution.
  • Understanding Gratuity Calculation and Its Cost for Indian Businesses — The statutory gratuity formula can cost up to the legal ceiling, and mis‑calculations often add unnecessary expense for employers.
  • When POSH Requires an Internal Committee for Ten Employees — Not forming the required Internal Committee can cost a business up to ₹50,000 and risk licence cancellation on repeat offences, making compliance a financial and operational priority.
  • Understanding Section 138 of the Negotiable Instruments Act — Section 138 creates a criminal remedy when a cheque bounces, imposing up to two years’ imprisonment, a fine of twice the cheque amount, and possible interim compensation of 20% while the case is pending, making non‑compliance costly for small businesses.
  • The hidden cost of late company filings — Late filing of mandatory forms triggers a daily charge of one hundred rupees per form with no ceiling, turning small delays into potentially large expenses for any Indian business.
  • How Section 16 of the MSME Act Charges Late Payment Interest — Section 16 forces a buyer who misses the payment deadline to pay compound interest at three times the RBI bank rate, compounded monthly, and the rate cannot be waived by contract, raising the cost of delayed payments for small suppliers.
  • Understanding the 45‑Day Payment Rule for MSMEs — Section 15 of the MSME Act caps payment to micro and small suppliers at 45 days from acceptance, triggering interest from day 46 if delayed, which can cost businesses significant cash flow loss.
  • DPDP Consent Notice: Checklist and Format for Websites & Apps — Section 5 makes a standalone consent notice mandatory before collecting any personal data. What it must contain, where to place it, and common mistakes.
  • What Is the DPDP Act 2023? Plain-English Summary for Indian Businesses — India’s Digital Personal Data Protection Act explained without legal jargon — who it applies to, the core rules, and what your business must change.
  • DPDP vs GDPR: 7 Key Differences Every Indian Business Must Know — DPDP is not European GDPR with the section numbers changed. Lawful bases, DPO rules, cross-border transfers and penalties compared side-by-side.
  • DPDP Act Penalties Explained: The Up to ₹250 Crore Schedule — Section 33 and the Schedule set penalties from ₹10,000 to ₹250 crore. How the Data Protection Board calculates fines and which breaches cost the most.
  • Udyam Registration for MSMEs: 7 Concrete Legal and Financial Benefits — Why registering on Udyam unlocks the 45-day payment protection under section 15, lower interest rates, and priority public procurement.
  • When Is EPF Registration Mandatory in India? Headcount and Rules — The 20-employee threshold under the Code on Social Security, which replaced the EPF Act, who counts as an employee, the wage ceiling, and the cost of depositing late.
  • POSH Compliance Checklist for Indian Startups & SMBs (2026) — A step-by-step checklist to constitute your Internal Committee, draft a compliant POSH policy, train staff, and file the mandatory annual report.
  • Vendor Agreement in India: 9 Essential Clauses You Cannot Skip — Scope of work, payment timelines under MSMED, limitation of liability, IP rights, and dispute resolution clauses every vendor agreement needs.
  • TDS on Contractor & Freelancer Payments: Section 393 (formerly 194C & 194J) — Since 1 April 2026, TDS on contractors and professionals is section 393 of the Income-tax Act, 2025. The rates (1%, 2%, 10%), the thresholds, and what failing to deduct costs.
  • The DPDP Rules, 2025: the dates your business is actually working to — The Act has been law since 2023 and enforced almost nothing. The Rules notified on 13 November 2025 set the clock — one year for consent managers, eighteen months for everything that touches you.
  • Full and final settlement: what you owe a departing employee, and when — Two working days for wages, thirty for gratuity. The deadlines are statutory, and "we settle at the end of the quarter" is not one of them.
  • Is an unstamped agreement valid? The honest answer is: valid, but unusable. — Section 35 of the Indian Stamp Act does not void your contract. It stops a court from looking at it, which in a dispute amounts to the same thing until you cure it.
  • A cheque bounced. What section 138 actually gives you, and by when. — The Negotiable Instruments Act runs on three deadlines: 30 days, 15 days, one month. Miss any of them and the offence is gone, however good the debt.
  • The DPDP Act, 2023: what an Indian SMB actually has to do — Not a GDPR summary with the numbers changed. What the Act actually requires, in the order a small business runs into it.
  • The 45-day rule: what it actually costs to pay an MSME supplier late — Section 16 of the MSMED Act does not ask nicely. Compound interest, three times the bank rate, and a clause in your contract cannot waive it.
  • POSH compliance at 10 employees: what actually becomes mandatory — Not a policy you write once and file away. A constituted committee, a real annual report, and a headcount nobody is tracking.
  • Missed an ROC filing? What s.403 of the Companies Act actually does — There is no upper limit, and it runs per day, per form, for as long as the filing stays outstanding.