DPDPA Section 33 — Penalties and adjudication
Applies to: Data Fiduciary
What this section does
Empowers the Board to impose monetary penalties after inquiry, having regard to the nature, gravity and duration of the breach, the type of personal data affected, repetitive conduct, and any mitigation taken. Amounts are set out in the Schedule.
Plain-English summary prepared by KensaraAI — not the statutory text. Read the official Act ↗
What you have to do
- ▸ Penalty exposure is per-breach, not capped per organisation
- ▸ Mitigation and cooperation are expressly relevant factors
Enforcement under this section (0)
No enforcement action citing this section has been recorded yet. The Data Protection
Board is not yet issuing penalties under the DPDPA — this page will populate as
enforcement begins.