Supreme Court Oversight

Under the DPDPA's appellate hierarchy, Section 29 governs appeals from the Data Protection Board to the Appellate Tribunal (TDSAT), and Section 30 deals with the execution of orders passed by the Appellate Tribunal (which are executable as a decree of a civil court). The appeal to the Supreme Court itself is governed by Section 18 of the TRAI Act, 1997, which is made applicable to DPDPA appeals via Section 29(9), and lies on a question of law arising out of an order of TDSAT. The limitation to 'questions of law' means that the Supreme Court will not re-examine factual findings unless they are so perverse as to constitute an error of law. This is consistent with the general appellate jurisdiction of the Supreme Court and ensures that it focuses on legal interpretation rather than factual adjudication.

Beyond the statutory appellate mechanism, the Supreme Court exercises constitutional jurisdiction under Articles 32 and 136 of the Constitution. Data protection matters may reach the Supreme Court through writ petitions challenging the constitutionality of specific provisions, the validity of Board procedures, or the proportionality of penalties. The Puttaswamy judgment (2017), which recognised the right to privacy as a fundamental right under Article 21, provides the constitutional foundation against which the DPDPA's provisions may be tested.

The Supreme Court's interpretation of key DPDPA concepts - such as 'digital personal data', 'legitimate uses', 'proportionality' of penalties, and the scope of government exemptions - will be authoritative and binding on all lower courts, tribunals, and the Board. Early Supreme Court decisions on the DPDPA will be particularly significant in establishing the interpretive framework for the Act. Organisations should monitor these decisions closely for compliance guidance.

The DPDPA is the legislative response to the Supreme Court's mandate in the Puttaswamy judgment. The Court established that any restriction on the right to privacy must satisfy the tests of legality, legitimate aim, proportionality, and procedural safeguards. Provisions of the DPDPA - particularly the broad government exemptions under Section 17 - may face constitutional scrutiny under these tests. The Supreme Court's role in reviewing these provisions ensures that the Act remains consistent with constitutional principles.