Section 15, DPDP Act 2023 — Duties of Data Principals & ₹10,000 Fine
Data Principals must not impersonate others, suppress facts, or file frivolous complaints — punishable with a fine up to ₹10,000. (Section 15, Digital Personal Data Protection Act, 2023.)
Quick Statutory Answer
Section 15 of the DPDP Act 2023 sets out mandatory statutory duties for individuals (Data Principals). It strictly prohibits impersonating others, suppressing material identity information on official government documents, submitting unverified details for correction, or filing false or frivolous complaints with a Data Fiduciary or the Board. Breach of Section 15 duties is punishable by the Data Protection Board with a fine of up to ₹10,000 under the Schedule.
A Data Principal must comply with the provisions of all applicable laws while exercising her rights under the Act.
She must not impersonate another person while providing personal data for a specified purpose.
She must not suppress any material information while providing personal data for any document, unique identifier, proof of identity or proof of address issued by the State.
She must not register a false or frivolous grievance or complaint with a Data Fiduciary or with the Data Protection Board.
While exercising the right to correction or erasure, she must furnish only information that is verifiably authentic.
Registering with another person's identity/PAN/Aadhaar
Must provide own authentic data
Up to ₹10,000 fine
Non-Suppression on State IDs
Concealing material facts for official State documents
Full truthful disclosure required
Up to ₹10,000 fine
No False / Frivolous Complaints
Filing fake or malicious grievances to harass companies
Good faith genuine grievances only
Up to ₹10,000 fine
Authentic Information for Correction
Supplying fabricated documents to modify records
Must provide verifiably authentic data
Up to ₹10,000 fine
Penalty for breach
Fine up to ₹10,000. The only provision in the DPDP Act imposing monetary penalties on individuals rather than companies.
Where people go wrong
Assuming the DPDP Act only imposes obligations on businesses. Section 15 explicitly penalises abusive user conduct.
Refusing to answer legitimate grievances under the assumption that they might be frivolous. Frivolousness is determined by the Board.
Common questions
What duties do individuals have under the DPDP Act?
Under Section 15, individuals must not impersonate others, suppress material facts on official documents, submit unauthentic data for correction, or file false and frivolous complaints with companies or the Board.
What is the penalty for filing a false complaint under the DPDP Act?
The Data Protection Board can impose a monetary penalty of up to ₹10,000 on an individual who files a false or frivolous complaint.
Maintains the law explainers, calculators, templates and blog posts on vidhisar.in: checks them against the statute text and updates them when the law changes. Errors and changes in the law can be reported to legal@vidhisar.in.
A plain-English summary of what this provision requires, not a reproduction of it and not legal advice. Read alongside the bare Act, and take advice on anything turning on your own facts.