Section 34: Crediting Sums Realised by Way of Penalties to Consolidated Fund of India
Section 34 is a single, simple sentence: every rupee the Board collects in penalties goes to the Consolidated Fund of India, not to the Board itself or to any complainant.
Quick summary
What Section 34 says
- Section 34 — all sums realised by way of penalties imposed by the Board under this Act shall be credited to the Consolidated Fund of India.
Breaking it down
This is a short, purely fiscal provision, but it settles a question that could otherwise create the wrong incentives: where does penalty money actually go?
The Board doesn't retain or benefit from the penalties it imposes. By directing all penalty proceeds to the Consolidated Fund of India — the government's general treasury account, used for its overall expenditure — the Act avoids any structure where the Board's own funding or operating budget could be tied to how much it collects in penalties, which could otherwise create pressure toward maximising penalty revenue rather than focusing purely on compliance and deterrence.
Penalized amounts don't go to the complainant or affected Data Principals either. This section makes clear a penalty is a punitive/deterrent measure directed at the state, not a compensatory payment to whoever was harmed — a Data Principal seeking compensation for harm they've suffered would need to look to other legal remedies, separate from the Board's own penalty process.
Why this section matters
How penalty revenue is handled affects the credibility of an enforcement body's incentives. Section 34's straightforward answer — it all goes to the general treasury, not to the regulator or to complainants — is a small but important piece of keeping the Board's enforcement decisions focused on compliance and deterrence rather than revenue generation.
Real-world example
What this means in practice
If the Board imposes a ₹50 crore penalty on a company following a significant data breach:
- Where the money goes — the full amount is credited to the Consolidated Fund of India, the government's general account.
- The Board's own funding — the Board itself doesn't receive any portion of this as additional operating funds.
- Affected Data Principals — the Data Principals whose data was breached don't receive any portion of this penalty as compensation — the penalty is a regulatory sanction, not a damages award to affected individuals.
Who needs to care about this section
- Anyone evaluating the Board's institutional incentives — this section is relevant context for understanding that penalty revenue doesn't flow back to the regulator.
- Data Principals considering their options after a breach — useful to know that a Board penalty against a Data Fiduciary isn't itself a compensation mechanism for the affected individual.
Common questions
Does the Data Protection Board keep the penalties it collects?
Do affected Data Principals receive any share of a penalty imposed on a Data Fiduciary?
Related sections
Section 35 — Protection of Action Taken in Good Faith
Continue to the next section in sequence.
Read Section 35Section 33 — Penalties
Go back to the previous section.
Read Section 33Chapter VIII — Penalties and Adjudication
See every section in this chapter together.
View the chapterFull DPDP Act Guide
Back to the overview page, with the complete section-by-section guide.
View all 44 sections
