Penalties
Voluntary undertakings under section 32: the DPDP settlement track
Section 32 of the DPDP Act 2023 lets the Data Protection Board accept a voluntary undertaking at any stage of a proceeding, barring further action on its contents. Breaking the undertaking revives the penalty route at the amount that applied to the original breach.