Short Answer
Customers can escalate unresolved complaints to the Data Protection Board of India, which has authority to investigate and penalize.
If unresolved, the customer can escalate the issue to the Data Protection Board of India, which has the authority to investigate and take action.
This makes it important for businesses to resolve issues proactively before they reach regulatory levels.
Law Reference
Section 18 – Establishment of Data Protection Board
Board-level escalations trigger formal investigations that are costly and reputationally damaging. Proactive resolution is always the better strategy.
After a retailer fails to respond to a data deletion request for 30 days, the customer files with the DPB, triggering a formal investigation and potential penalty proceedings.
Was this answer helpful?
Our team is here to help you with any questions about DPDP compliance.