Data protection · Provision

Section 15, DPDP Act 2023 — Duties of Data Principals & ₹10,000 Fine

Data Principals must not impersonate others, suppress facts, or file frivolous complaints — punishable with a fine up to ₹10,000. (Section 15, Digital Personal Data Protection Act, 2023.)

Quick Statutory Answer

Section 15 of the DPDP Act 2023 sets out mandatory statutory duties for individuals (Data Principals). It strictly prohibits impersonating others, suppressing material identity information on official government documents, submitting unverified details for correction, or filing false or frivolous complaints with a Data Fiduciary or the Board. Breach of Section 15 duties is punishable by the Data Protection Board with a fine of up to ₹10,000 under the Schedule.

Check your compliance exposure — free All provisions

What the section does

  • A Data Principal must comply with the provisions of all applicable laws while exercising her rights under the Act.
  • She must not impersonate another person while providing personal data for a specified purpose.
  • She must not suppress any material information while providing personal data for any document, unique identifier, proof of identity or proof of address issued by the State.
  • She must not register a false or frivolous grievance or complaint with a Data Fiduciary or with the Data Protection Board.
  • While exercising the right to correction or erasure, she must furnish only information that is verifiably authentic.

Section 15 DPDP Act: Mandatory Duties of Individuals & Statutory Penalties

Section 15 DPDP Act: Mandatory Duties of Individuals & Statutory Penalties
Statutory Duty (Section 15) Prohibited Action Legal Benchmark Penalty (Section 33 Schedule)
Prohibition of Impersonation Registering with another person's identity/PAN/Aadhaar Must provide own authentic data Up to ₹10,000 fine
Non-Suppression on State IDs Concealing material facts for official State documents Full truthful disclosure required Up to ₹10,000 fine
No False / Frivolous Complaints Filing fake or malicious grievances to harass companies Good faith genuine grievances only Up to ₹10,000 fine
Authentic Information for Correction Supplying fabricated documents to modify records Must provide verifiably authentic data Up to ₹10,000 fine

Penalty for breach

Fine up to ₹10,000. The only provision in the DPDP Act imposing monetary penalties on individuals rather than companies.

Where people go wrong

  • Assuming the DPDP Act only imposes obligations on businesses. Section 15 explicitly penalises abusive user conduct.
  • Refusing to answer legitimate grievances under the assumption that they might be frivolous. Frivolousness is determined by the Board.

Common questions

What duties do individuals have under the DPDP Act?

Under Section 15, individuals must not impersonate others, suppress material facts on official documents, submit unauthentic data for correction, or file false and frivolous complaints with companies or the Board.

What is the penalty for filing a false complaint under the DPDP Act?

The Data Protection Board can impose a monetary penalty of up to ₹10,000 on an individual who files a false or frivolous complaint.

Act on this

  • Section 13 — grievance redressal
  • Section 33 — Schedule of statutory penalties

Other provisions

  • Section 17, Digital Personal Data Protection Act
  • Section 14, Digital Personal Data Protection Act
  • Section 32, Digital Personal Data Protection Act
  • Section 13, Digital Personal Data Protection Act
  • Section 5, Digital Personal Data Protection Act
  • Section 12, Digital Personal Data Protection Act

Maintained by the VidhiSar Legal Team

Maintains the law explainers, calculators, templates and blog posts on vidhisar.in: checks them against the statute text and updates them when the law changes. Errors and changes in the law can be reported to legal@vidhisar.in.

About this summary

A plain-English summary of what this provision requires, not a reproduction of it and not legal advice. Read alongside the bare Act, and take advice on anything turning on your own facts.