Ch IPreliminary
S.1 Short title and commencementS.2 DefinitionsS.3 Application and scopeCh IIObligations of Data Fiduciary
S.4 Grounds for processingS.5 NoticeS.6 ConsentS.7 Certain legitimate usesS.8 Data Fiduciary obligationsS.9 Children’s dataS.10 Significant Data FiduciaryCh IIIRights and duties of Data Principal
S.11 Right to accessS.12 Correction and erasureS.13 Grievance redressalS.14 Right to nominateS.15 Duties of the Data PrincipalCh IVSpecial provisions
S.16 Transfer outside IndiaS.17 ExemptionsCh VData Protection Board of India
S.18 Establishment of the BoardS.19 Composition of the BoardS.20 Salary and term of officeS.21 DisqualificationsS.22 Resignation and vacanciesS.23 Proceedings of the BoardS.24 Officers and employeesS.25 Members as public servantsS.26 Powers of the ChairpersonCh VIBoard powers and procedure
S.27 Powers and functions of the BoardS.28 Procedure followed by the BoardCh VIIAppeal and dispute resolution
S.29 Appeal to the Appellate TribunalS.30 Tribunal orders as a decreeS.31 Alternate dispute resolutionS.32 Voluntary undertakingCh VIIIPenalties
S.33 Penalties and the ScheduleS.34 Penalties to Consolidated FundCh IXMiscellaneous
S.35 Good-faith protectionS.36 Power to call for informationS.37 Blocking of accessS.38 Consistency with other lawsS.39 Bar of jurisdictionS.40 Power to make rulesS.41 Laying of rules before ParliamentS.42 Power to amend the ScheduleS.43 Power to remove difficultiesS.44 Amendments to other ActsConcept
The Act places duties on Data Principals too, including not impersonating others and not filing false grievances.
TL;DR
Duties of a Data Principal (Section 15) require individuals not to impersonate others, suppress material information, or file false or frivolous complaints. Breaching these duties is the one penalty on the Schedule aimed at individuals, extending up to ten thousand rupees.
A Data Principal shall perform the following duties: comply with applicable laws while exercising rights; not impersonate another person; not suppress material information while providing personal data for a State-issued document or identifier; not register a false or frivolous grievance or complaint; and furnish only verifiably authentic information while exercising the right to correction or erasure.
Rights come with responsibilities. A Data Principal must not impersonate someone else, suppress material information on official documents, or raise false or frivolous complaints.
Breaching these duties is the one item on the penalty Schedule aimed at individuals, with a penalty that may extend to ten thousand rupees.
Filing a knowingly false complaint against a fiduciary breaches a Data Principal's duties under Section 15.
Are there penalties for a Data Principal?
Yes. Breach of the Section 15 duties can attract a penalty that may extend to ten thousand rupees.
What is the main duty?
To act honestly: no impersonation, no suppressing material information, no false grievances.
Consultant-led and partner-backed.