Short Answer
Customers can escalate to the Data Protection Board, which can investigate and impose penalties up to ₹250 crore.
Customers can escalate complaints to the Data Protection Board, which can investigate and impose penalties.
This makes timely handling of requests critical from both compliance and reputation perspectives.
Law Reference
Section 18 – Data Protection Board
Delayed responses damage customer trust and invite regulatory scrutiny. Businesses must define internal SLAs for all data requests.
A customer requests data deletion from an e-commerce platform. After 30 days without response, they file a complaint with the Data Protection Board, triggering an investigation.
Was this answer helpful?
Our team is here to help you with any questions about DPDP compliance.