The Board Can Order You Fixed First
On a breach intimation the Board may direct urgent remedial or mitigation measures before any penalty
Read the full guide: Section 27(1)(a) — DPDP Act compliance guide
Watch in English
Summary
The Board can order the fix before the fine.
On a breach intimation the Board may direct urgent remedial or mitigation measures before any penalty
Full transcript
The Board can order the fix before the fine.
Section 27(1)(a) is the breach power.
On receiving an intimation of a breach,
it may direct urgent remedial measures.
Pause. Before what, exactly?
The Act names the direction, then the inquiry.
Urgent remedial or mitigation measures.
Then it may inquire and impose a penalty.
Stopping the bleeding comes first.
The order can arrive before the penalty does.
s.27(1)(a) — Digital Personal Data Protection Act, 2023 + Rules, 2025
In force from 13 May 2027