India DPDPA: Article 34 – Crediting sums realised by way of penalties to Consolidated Fund of India
34. Crediting sums realised by way of penalties to Consolidated Fund of India
All sums realised by way of penalties imposed by the Board under this Act, shall be credited to the Consolidated Fund of India.
What Article 34 Means for Your Business
Article 34 provides that all penalty amounts collected under the DPDPA are credited to the Consolidated Fund of India rather than being retained by the Data Protection Board. This is a structural safeguard against the regulator having a financial incentive to maximise penalties.
- The Board’s funding does not depend on penalty revenue, this reduces the risk of enforcement being driven by revenue considerations rather than genuine regulatory priorities.
- Penalties paid are not recoverable, unlike civil litigation where damages flow to the aggrieved party, DPDPA penalties go to the government, not to affected Data Principals.
- Data Principals must pursue separate civil remedies if they wish to recover compensation for harm caused by a data breach, the penalty under Article 33 does not compensate individuals directly.
Frequently Asked Questions about Article 34
+ What does Article 34 of the DPDP Act state?
Article 34 states that all penalties collected under the Act are credited to the Consolidated Fund of India.
+ Do affected individuals receive compensation from penalties?
No. The penalties are paid to the government and are not distributed to individuals affected by data breaches.
+ Why is this important for businesses?
It emphasizes that penalties are purely punitive, so businesses must focus on compliance to avoid financial loss.
+ Can businesses recover penalty amounts?
No. Once a penalty is imposed and paid, it cannot be recovered or adjusted.