DPDP NavigatorAct 2023 · Rules 2025
All guides
Rights & Grievances

Escalation Paths: What Happens After a Data Principal Approaches the Board

28 Jul 20269 min read

A Data Principal can only approach the Data Protection Board of India after exhausting your internal grievance mechanism. Here is what that means for how your organization should prepare.

The sequencing built into Section 13

Section 13 structures grievance redressal as a two-stage process: the Data Principal must first bring the complaint to the Data Fiduciary or Consent Manager, and only if that internal mechanism does not resolve it within the required period does the matter proceed to the Data Protection Board of India. That sequencing means the Board is not typically the first place a dissatisfied Data Principal shows up - it is where they land after your own process has already had a chance, and arguably failed, to fix the problem.

That framing should change how you think about every internal grievance you handle. Each one is effectively a rehearsal for what the Board would see if the matter escalated, so the quality of your internal resolution and its documentation matters well beyond the individual case.

What the Board process generally looks like

Once a matter reaches the Data Protection Board of India, the organization should expect to be asked to explain both the substance of the original complaint and how the internal grievance mechanism handled it. This is where the record-keeping from the grievance stage becomes directly relevant - a clear file showing what was raised, what was investigated, and what was decided puts the organization in a far stronger position than reconstructing the story from memory after the fact.

Decisions from the Board can be appealed further, to the Appellate Tribunal, which is understood to be the Telecom Disputes Settlement and Appellate Tribunal. That appeal path exists for both sides, but it also means a matter that reaches the Board is not necessarily final, and the organization's position needs to be defensible at more than one level of review.

What to have ready before a matter ever gets there

The single most valuable preparation is disciplined grievance record-keeping from day one, not assembled retroactively once escalation looks likely. That includes the original complaint, the internal investigation, the reasoning behind the resolution offered, and the communication sent to the Data Principal.

It is also worth periodically reviewing closed grievances as if you were the Board looking at them cold: does the resolution seem genuinely responsive to what was asked, or does it read as a formality. That exercise tends to surface weak spots in the internal process before an actual escalation forces the issue.

Where to go next

The Evidence Tracker keeps the case file that would matter most if a grievance escalates, and the Timeline Explorer helps confirm your internal grievance timelines are tracking correctly against the prescribed period under the Rules.