Skip to main content
Home/DPDP Act/Chapter VIII — Penalties and Adjudication/Section 34 — Crediting Sums Realised by Way of Penalties to Consolidated Fund of India
DPDP Act, 2023 · Chapter VIII · Section 34 of 44

Section 34: Crediting Sums Realised by Way of Penalties to Consolidated Fund of India

Section 34 is a single, simple sentence: every rupee the Board collects in penalties goes to the Consolidated Fund of India, not to the Board itself or to any complainant.

Effective from 13 May 2027Reviewed September 2026
StatusEffective 13 May 2027
Chapter VIII · Penalties and Adjudication

Quick summary

In plain terms: All sums realised by way of penalties imposed by the Board under the Act are credited to the Consolidated Fund of India.

What Section 34 says

  • Section 34 — all sums realised by way of penalties imposed by the Board under this Act shall be credited to the Consolidated Fund of India.

Breaking it down

This is a short, purely fiscal provision, but it settles a question that could otherwise create the wrong incentives: where does penalty money actually go?

The Board doesn't retain or benefit from the penalties it imposes. By directing all penalty proceeds to the Consolidated Fund of India — the government's general treasury account, used for its overall expenditure — the Act avoids any structure where the Board's own funding or operating budget could be tied to how much it collects in penalties, which could otherwise create pressure toward maximising penalty revenue rather than focusing purely on compliance and deterrence.

Penalized amounts don't go to the complainant or affected Data Principals either. This section makes clear a penalty is a punitive/deterrent measure directed at the state, not a compensatory payment to whoever was harmed — a Data Principal seeking compensation for harm they've suffered would need to look to other legal remedies, separate from the Board's own penalty process.

Why this section matters

How penalty revenue is handled affects the credibility of an enforcement body's incentives. Section 34's straightforward answer — it all goes to the general treasury, not to the regulator or to complainants — is a small but important piece of keeping the Board's enforcement decisions focused on compliance and deterrence rather than revenue generation.

Real-world example

Example

What this means in practice

If the Board imposes a ₹50 crore penalty on a company following a significant data breach:

  • Where the money goes — the full amount is credited to the Consolidated Fund of India, the government's general account.
  • The Board's own funding — the Board itself doesn't receive any portion of this as additional operating funds.
  • Affected Data Principals — the Data Principals whose data was breached don't receive any portion of this penalty as compensation — the penalty is a regulatory sanction, not a damages award to affected individuals.

Who needs to care about this section

  • Anyone evaluating the Board's institutional incentives — this section is relevant context for understanding that penalty revenue doesn't flow back to the regulator.
  • Data Principals considering their options after a breach — useful to know that a Board penalty against a Data Fiduciary isn't itself a compensation mechanism for the affected individual.

Common questions

Does the Data Protection Board keep the penalties it collects?
No — this section requires all penalty amounts to be credited to the Consolidated Fund of India, the government's general treasury, not retained by the Board.
Do affected Data Principals receive any share of a penalty imposed on a Data Fiduciary?
No — the penalty goes to the Consolidated Fund of India, not to the individuals affected by the breach; it functions as a regulatory sanction rather than a compensation mechanism.