Today's Headlines

1. The wrong forum for your data: Why TDSAT falls short under the DPDP Act - Bar and Bench

Source: Bar and Bench | Read Original →

Legal experts are voicing concerns that the Telecom Disputes Settlement and Appellate Tribunal (TDSAT) may be an ill-suited appellate body for decisions made by the Data Protection Board of India (DPBI). The article highlights TDSAT's lack of prior expertise in complex data privacy matters, which could hinder its ability to effectively adjudicate appeals related to the DPDP Act 2023. This raises questions about the efficiency and fairness of the appeal mechanism for Data Fiduciaries and Data Principals.

2. India's Data Privacy Appeals Assigned to Unsuitable Tribunal - Whalesbook

Source: Whalesbook

Echoing similar sentiments, this report criticizes the assignment of data privacy appeals to TDSAT, emphasizing that its mandate and experience primarily lie in telecommunications. The designation, as per Section 19 of the DPDP Act, creates a potential disconnect between the specialized nature of data protection violations and the tribunal's operational focus. Businesses might face prolonged and complex legal battles if appeals against DPBI orders require re-education of the tribunal on fundamental data privacy principles.

---

DPDP Impact Analysis

Today's headlines underscore a critical developing concern for Indian businesses navigating the Digital Personal Data Protection (DPDP) Act 2023: the suitability of the designated appellate authority. The recurring sentiment that the Telecom Disputes Settlement and Appellate Tribunal (TDSAT) may be an "unsuitable" forum for appeals against Data Protection Board of India (DPBI) decisions is not merely a legal quibble; it has significant practical implications for Data Fiduciaries and Data Principals across the country.

For businesses, this situation introduces an element of uncertainty into the DPDP compliance and enforcement landscape. While the DPBI is being established as the primary enforcement body, the efficacy and predictability of the appeals process are paramount. Should a Data Fiduciary face a significant penalty (up to ₹250 Cr for major breaches, as per Section 33 of the Act) or a compliance directive from the DPBI, their ability to appeal that decision effectively and promptly is crucial. A tribunal without deep, pre-existing expertise in data privacy law could lead to inconsistent rulings, longer resolution times, and potentially higher legal costs as counsel would need to educate the bench on foundational DPDP principles before arguing the specifics of a case.

This also impacts the overall credibility and speed of justice for Data Principals. If their complaints are escalated to the DPBI and then appealed, delays or lack of specialized understanding at the appellate level could undermine trust in the redressal mechanism envisioned by the Act. Businesses, therefore, must not only focus on robust preventative compliance to avoid penalties under sections like Section 8 (Data Fiduciary obligations) but also factor in the potential complexities of the appellate process should a dispute arise.

Moving forward, businesses should closely monitor developments in this area. While the current framework assigns appeals to TDSAT, discussions around its suitability may prompt future clarifications or even legislative amendments. For now, the best strategy remains to strengthen internal data governance frameworks, ensure meticulous adherence to consent mechanisms, purpose limitations, and security safeguards, thereby minimizing the likelihood of needing to engage with the appellate process at all.

---

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.

---

Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.