Section 29 - Appeal to Appellate Tribunal

1.1 Detailed commentary read with Rule 22 and the Telecom Regulatory Authority of India Act, 1997

2. Purpose and structure of the appellate remedy

Section 29 creates the first statutory appeal against an order or direction of the Data Protection Board of India.

The appeal lies to the Telecom Disputes Settlement and Appellate Tribunal, commonly known asTDSAT. The DPDPA adopts the existing tribunal established under Section 14 of the Telecom Regulatory Authority of India Act, 1997 rather than establishing a separate data-protection appellate tribunal. The TRAI Act has also been amended to recognise additional appellate jurisdictions conferred on TDSAT under statutes other than the telecom framework.

The ordinary DPDPA redress sequence is:

1. Exercise of right or privacy grievance
2. Data Fiduciary or Consent Manager internal grievance mechanism
3. Complaint to the Data Protection Board after exhausting Section 13 redress
4. Order or direction of the Board
5. Appeal to TDSAT under Section 29
6. Further appeal to the Supreme Court under Section 18 of the TRAI Act

Section 29 therefore provides appellate review of the Board’s adjudicatory action. It does not ordinarily permit TDSAT to exercise the Board’s original jurisdiction before the Board has made an appealable order or direction.

2.1 The Appellate Tribunal

3. TDSAT as the DPDPA Appellate Tribunal

The DPDPA defines the “Appellate Tribunal” by reference to TDSAT established under Section 14 of the TRAI Act.

TDSAT was originally constituted to:

• adjudicate specified telecom disputes;

• hear appeals against directions, decisions and orders of the Telecom Regulatory Authority of India.

Its jurisdiction was subsequently expanded to include appellate functions under other statutes. The DPDPA adds appeals against orders and directions of the Data Protection Board to that wider tribunal architecture.

The use of TDSAT has three principal consequences:

1. the DPDPA appeal is heard by an existing statutory tribunal rather than a newly created privacy court;

2. relevant institutional and procedural provisions of the TRAI Act apply alongside Section 29 and Rule 22;

3. a further appeal follows the Supreme Court route under Section 18 of the TRAI Act.

TDSAT’s jurisdiction under the DPDPA remains distinct from its telecom jurisdiction. A DPDPA appeal must be determined according to:

• the DPDPA;

• the DPDP Rules;

• the applicable provisions of the TRAI Act;

• principles of natural justice.

Telecom-law standards cannot be imported into a data-protection appeal unless legally relevant.

3.1 Who may appeal

4. “Any person aggrieved”

The appeal is available to any person aggrieved by a Board order or direction.

This is wider than a right confined to Data Principals. Depending on the order, an appellant may include:

• a Data Principal whose complaint was closed or dismissed;

• a Data Fiduciary against whom a direction or monetary penalty was issued;

• a Significant Data Fiduciary affected by a Board order;

• a Consent Manager;

• an intermediary proceeded against under Section 37;

• another person directly affected by a Board order or direction.

The person must be aggrieved. This requires a real and sufficient adverse effect upon the person’s:

• rights;

• obligations;

• legal position;

• statutory responsibilities;

• financial interests;

• processing operations.

A person does not ordinarily acquire appellate standing merely because she:

• disagrees with the Board’s interpretation;

• has a general interest in data protection;

• considers the decision undesirable as a matter of policy;

• is remotely or indirectly affected.

The appellant need not necessarily have initiated the proceeding. A respondent against whom the Board made an adverse order, or another person directly bound by a direction, may be aggrieved despite not being the original complainant.

4.1 Data Processors and other affected entities

A Data Processor may potentially qualify where the Board’s direction directly affects its systems, records or operations.

However, its standing should not be assumed merely because the Data Fiduciary is its customer. The processor must show a direct adverse effect rather than only a commercial concern arising indirectly from an order made against the Data Fiduciary.

4.2 Appealable decisions

5. “Order or direction made by the Board under this Act”

Section 29 covers both an order and adirection made under the DPDPA.

Potentially appealable decisions include:

• preliminary closure for insufficient grounds under Section 28(4);

• final closure following inquiry under Section 28(11);

• an urgent remedial or mitigation direction under Section 27(1)(a);

• a general binding direction under Section 27(2);

• an order under Section 27(3) modifying, suspending, withdrawing or cancelling a direction;

• an interim order under Section 28(10);

• a warning or costs order under Section 28(12);

• a monetary penalty imposed under Section 33;

• an order concerning the registration of a Consent Manager, where made under the applicable statutory and regulatory framework.

The wording is not confined to final penalty orders.

6. Interim orders and directions

Section 29(1) does not exclude interlocutory or interim Board orders. An interim order under Section 28(10) may therefore be appealable where it presently affects the appellant’s rights or operations.

However, not every procedural communication is an appealable order. The following may ordinarily be only administrative or case-management steps:

• allocation of a proceeding to a Member;

• scheduling of a hearing;

• a routine request for clarification;

• an internal administrative communication;

• a non-binding procedural intimation.

The substance and legal effect of the act are more important than its title. A document described as a “communication” may be appealable if it imposes a binding obligation. Conversely, a document styled as an “order” may not be independently appealable if it is merely an internal administrative step without adverse legal effect.

7. Inaction by the Board

Section 29 is framed as an appeal against an order or direction.

It does not expressly provide an appeal where the Board:

• fails to handle a complaint;

• delays deciding whether sufficient grounds exist;

• does not complete an inquiry;

• fails to issue an order or direction.

This differs from Article 78 GDPR, which expressly provides a judicial remedy where a supervisory authority fails to handle a complaint or fails to inform the data subject within the prescribed period.

Unlawful Board inaction may require another public-law remedy, including appropriate constitutional or judicial-review proceedings where legally maintainable. It is not clearly converted into a Section 29 appeal in the absence of an order or direction.

7.1 Limitation

8. Sixty-day period

The appeal must ordinarily be filed within sixty days from the date of receipt of the Board’s order or direction.

The starting point is not necessarily:

• the date appearing on the order;

• the date on which the Board approved it;

• the date of publication;

• the date on which another party received it.

The limitation period begins when the person appealing receives the decision through a legally effective method.

This is particularly important in a digital system. Relevant evidence of receipt may include:

• portal delivery records;

• electronic acknowledgement;

• registered email records;

• a digital service notification;

• another service mechanism prescribed or adopted by the Board.

Mere internal upload of an order may not necessarily constitute receipt if the person was not effectively notified or given access in the required manner.

9. Date of presentation

The appeal is “presented” when it is validly lodged through the prescribed digital mechanism.

The appellant should preserve:

• filing acknowledgement;

• time stamp;

• transaction or diary number;

• proof of fee payment;

• uploaded copy of the appeal;

• proof of the date on which the Board’s decision was received.

These records may be essential if limitation is disputed.

10. Condonation of delay

TDSAT may entertain an appeal filed after sixty days where it is satisfied that there was sufficient cause for the delay.

This power prevents the limitation period from operating inflexibly where timely filing was genuinely impossible.

The appellant should explain:

• when the order was received;

• when the limitation period expired;

• the duration of delay;

• the circumstances preventing timely filing;

• the steps taken once the obstacle ended;

• supporting evidence where available.

Potentially relevant circumstances may include:

• serious illness;

• failure of legally effective service;

• unavoidable digital-system failure;

• circumstances beyond the appellant’s control;

• another genuine and adequately explained impediment.

Ordinary negligence, tactical delay or unexplained inaction may not constitute sufficient cause.

11. No absolute outer limit

Section 29(3) does not prescribe a final outer period beyond which delay can never be condoned.

TDSAT therefore retains jurisdiction to consider a delayed appeal even after a substantial period. However, a longer delay will ordinarily require a stronger, more complete and continuous explanation.

12. Condonation is discretionary, not automatic

Showing sufficient cause permits TDSAT to entertain the delayed appeal. It does not create an automatic entitlement.

The discretion must be exercised:

• judicially;

• on relevant material;

• consistently with access to justice;

• after considering prejudice and diligence.

Where condonation would adversely affect another party, that party should receive an opportunity to respond.

12.1 Form, manner and fee

13. Digital filing under Rule 22

Rule 22 requires the appeal to be filed in digital form in the manner decided by TDSAT.

TDSAT may therefore specify operational requirements concerning:

• the filing portal;

• format of pleadings;

• electronic authentication;

• digital signatures;

• supporting documents;

• file size and format;

• proof of service;

• online acknowledgements;

• applications filed with the appeal.

An effective appeal would ordinarily identify:

• the appellant and respondents;

• the Board order or direction challenged;

• date of receipt;

• facts necessary to understand the dispute;

• specific grounds of challenge;

• relief requested;

• supporting documents;

• application for condonation, where required;

• application for stay or interim relief, where required;

• proof of fee payment or an application for reduction or waiver.

The appeal should identify the alleged errors in the Board’s decision rather than constitute a general repetition of the original complaint or defence.

14. Appeal fee

Rule 22 provides that a DPDPA appeal must be accompanied by the same fee as applicable to an appeal under the TRAI Act framework. It does not prescribe a separate fixed DPDPA amount in the Rule itself.

The Chairperson of TDSAT may:

• reduce the fee; or

• waive the fee.

This discretion is important for Data Principals and other appellants for whom the prescribed fee may impede access to appellate review.

Rule 22 does not state a detailed statutory test for reduction or waiver. Relevant considerations may include:

• financial hardship;

• nature of the appellant;

• circumstances of the case;

• the need to preserve effective appellate access.

The fee must be paid digitally using:

• Unified Payments Interface; or

• another payment system authorised by the Reserve Bank of India.

A fee-waiver application should be capable of being filed without prior payment. Otherwise, the waiver power would be ineffective for the persons who need it.

14.1 Effect of filing an appeal

15. No automatic stay

Filing an appeal does not automatically suspend the Board’s order or direction.

Section 29 contains no statutory stay merely upon filing.

The Board’s decision therefore remains operative unless:

• TDSAT grants a stay or interim relief;

• the Board modifies or suspends its direction under Section 27(3);

• the Supreme Court or another competent authority grants relief;

• the decision itself provides for delayed commencement.

This is particularly important for:

• urgent breach-mitigation directions;

• interim processing restrictions;

• orders requiring technical changes;

• monetary penalties;

• Consent Manager registration decisions.

An appellant requiring urgent protection should file a specific interim application.

16. Interim relief by TDSAT

Section 29 does not separately codify the test for stay. TDSAT’s procedural and incidental powers under the DPDPA and TRAI Act framework support granting effective interim relief where necessary to preserve the appeal.

Relevant considerations may include:

• existence of a prima facie case;

• balance of convenience;

• irreparable or serious prejudice;

• interests of affected Data Principals;

• public interest;

• reversibility of the Board’s direction;

• risk that the appeal will become ineffective without interim relief.

Where personal data remains exposed or the Board’s order protects affected individuals, TDSAT must consider the consequences of suspension for those individuals, not only the operational burden on the appellant.

16.1 Hearing and appellate powers

17. Mandatory opportunity of hearing

TDSAT must give the parties an opportunity of being heard before deciding the appeal.

The parties should be permitted to address:

• the grounds of appeal;

• the Board’s findings;

• evidence;

• jurisdiction;

• statutory interpretation;

• procedural fairness;

• necessity of directions;

• amount of penalty;

• relief sought.

The hearing may be:

• written;

• oral through digital means;

• partly written and partly oral;

• physical where practicable and justified.

The essential requirement is a meaningful opportunity to present the case.

18. Nature and scope of the first appeal

Section 29 does not restrict TDSAT to questions of law.

The first appeal may therefore extend to:

• questions of law;

• factual findings;

• mixed questions of law and fact;

• jurisdiction;

• natural justice;

• relevance and sufficiency of evidence;

• necessity and proportionality of directions;

• calculation of monetary penalties;

• application of exemptions;

• adequacy of reasons.

TDSAT may examine whether the Board:

• applied the correct statutory provision;

• interpreted the Act correctly;

• remained within its jurisdiction;

• followed Section 28 procedure;

• gave the affected person an adequate hearing;

• considered material evidence;

• ignored relevant facts;

• relied upon irrelevant considerations;

• recorded intelligible reasons;

• applied the Section 33 penalty factors correctly.

This is broader than the later appeal to the Supreme Court, which is limited through Section 18 of the TRAI Act.

19. Appellate review is not automatically a fresh inquiry

A broad appeal does not necessarily mean that the entire matter begins again from the outset.

TDSAT ordinarily reviews:

• the Board’s record;

• the order challenged;

• the grounds of appeal;

• properly admitted additional material.

The appellant should identify error in the Board’s decision. The Tribunal need not disregard the Board proceeding and reconstruct the matter as if no inquiry had occurred.

20. Confirming the Board’s decision

TDSAT may confirm the order appealed against.

Confirmation leaves the Board’s decision in force.

The Tribunal may confirm:

• the finding of breach;

• the monetary penalty;

• the direction;

• the closure of a complaint;

• the dismissal of a complaint;

• an interim order.

A proper confirmation order should address the material grounds raised in appeal. A bare statement that the appeal lacks merit may be inadequate where substantial legal or factual issues were argued.

21. Modifying the order

TDSAT may modify the Board’s order.

Modification permits it to preserve part of the decision while changing another part.

The Tribunal may potentially modify:

• the penalty amount;

• the scope of a direction;

• the time allowed for compliance;

• conditions attached to a direction;

• the data or processing operations covered;

• part of the Board’s findings;

• costs imposed on a complainant.

The modification must remain within the remedies lawfully available under the DPDPA.

TDSAT cannot use this power to create a remedy that the Act does not provide. In particular, the power to modify does not itself create jurisdiction to award compensation or damages to a Data Principal.

22. Setting aside the order

TDSAT may set aside the Board’s order wholly or partly.

This may be appropriate where:

• the Board lacked jurisdiction;

• sufficient grounds for inquiry did not exist;

• the alleged breach was not established;

• material evidence was ignored;

• the legal test was incorrect;

• natural justice was violated;

• a direction exceeded statutory authority;

• a penalty was imposed without applying Section 33;

• the reasons were legally inadequate.

A procedural error should not automatically result in setting aside an order where it was immaterial and caused no prejudice. Section 23(2)(c) itself protects Board proceedings against procedural irregularity that does not affect the merits.

Conversely, a procedural failure affecting:

• the opportunity of hearing;

• impartiality;

• evidence considered;

• the outcome;

• the respondent’s ability to answer the case, may justify appellate intervention.

23. Remand to the Board

Section 29 expressly authorises TDSAT to:

• confirm;

• modify;

• set aside.

It does not expressly use the word “remand.”

However, the wider power to pass such orders as it thinks fit on the appeal, read with the power to set aside, may support sending a matter back to the Board where a lawful fresh determination is necessary.

Remand may be appropriate where:

• the Board denied a material opportunity of hearing;

• essential evidence was not examined;

• findings are incomplete;

• the Board applied the wrong legal test;

• further specialist fact-finding is required.

TDSAT should not remand mechanically where it can finally resolve the matter on the existing record. Repeated remands could undermine the statutory objective of expeditious disposal.

24. New evidence on appeal

Section 29 and Rule 22 do not provide a detailed test governing fresh evidence.

TDSAT’s power to regulate its procedure, together with natural justice, may permit additional evidence where:

• it could not reasonably have been produced before the Board;

• the Board improperly refused it;

• it concerns events arising after the Board’s decision;

• it is necessary to decide the appeal fairly.

The appellate process should not normally allow a party to withhold evidence during the Board inquiry and produce it strategically only on appeal.

Where new material fundamentally changes the factual inquiry, TDSAT may need to consider whether:

• it should determine the issue itself;

• the other parties need further opportunity to respond;

• the matter should be remitted to the Board.

25. No worsening of a party’s position without hearing

The phrase “such orders thereon as it thinks fit” should not be interpreted as allowing TDSAT to impose a new adverse consequence without fair notice.

If the Tribunal is considering:

• increasing a penalty;

• expanding a direction;

• making an adverse finding on a new ground;

• affecting a person who did not have an opportunity before the Board, natural justice requires notice and a meaningful opportunity to respond.

The Tribunal’s appellate power is broad, but not unstructured.

25.1 TRAI Act provisions relevant to a Section 29 appeal

26. Section 14A of the TRAI Act

Section 29(8) expressly preserves Section 14A of the TRAI Act.

Section 14A is the general provision under which applications and appeals are made to TDSAT. Among other things, it reflects the following procedural structure:

• an aggrieved person may appeal against a direction, decision or order within TDSAT’s jurisdiction;

• TDSAT hears the parties;

• it may pass such orders as it thinks fit;

• copies of its decisions are sent to the parties and relevant authority;

• proceedings are intended to be disposed of expeditiously.

For DPDPA appeals, however, Section 29 is the more specific provision.

Accordingly:

• the DPDPA limitation period is sixty days, not the thirty-day period applicable to ordinary TRAI appeals under Section 14A;

• the DPDPA six-month disposal target applies instead of the different TRAI Act target;

• Rule 22 governs digital filing and fee payment for DPDPA appeals.

Section 14A supplements Section 29 where consistent. It does not override a specific DPDPA rule.

27. Section 16 of the TRAI Act: procedure and powers

Section 29(8) also expressly preserves Section 16 of the TRAI Act.

Section 16 provides TDSAT with its principal procedural and evidentiary framework. Broadly, it:

• frees TDSAT from strict application of the Code of Civil Procedure;

• requires it to be guided by natural justice;

• permits it to regulate its own procedure;

• gives it specified civil-court-like powers.

Those civil-court-like powers include matters such as:

• summoning and enforcing attendance;

• examination on oath;

• discovery and production of documents;

• receiving evidence on affidavits;

• requisitioning public records;

• issuing commissions for examination of witnesses or documents;

• reviewing decisions;

• dismissing matters for default;

• deciding matters ex parte;

• other prescribed procedural matters.

27.1 Civil-court powers do not make TDSAT an ordinary civil court

TDSAT remains a statutory tribunal.

Its powers and jurisdiction are determined by:

• the DPDPA;

• the TRAI Act;

• applicable Rules;

• natural justice.

It does not obtain general civil jurisdiction merely because it has selected CPC-like evidence powers.

27.2 Review, restoration and ex parte procedure

The Section 16 framework is significant where:

• a party fails to appear;

• an appeal is dismissed for default;

• TDSAT decides a matter ex parte;

• a party seeks restoration;

• review of a tribunal decision is requested.

Any review application must remain within the statutory review power. It cannot be used as an unrestricted second appeal or a re-argument merely because a party disagrees with the result.

27.3 Judicial character of proceedings

The TRAI Act gives TDSAT proceedings a judicial character for specified criminal-law purposes, including false evidence and conduct affecting proceedings.

This reinforces the seriousness of:

• affidavits;

• testimony;

• document production;

• representations to the Tribunal.

Digital proceedings remain judicial proceedings even though parties attend remotely.

28. Right to legal representation under Section 17 of the TRAI Act

Section 17 of the TRAI Act recognises the right of an appellant or applicant to appear through an authorised legal practitioner.

A party may therefore ordinarily:

• appear personally;

• be represented by an advocate;

• use other representation permitted by the applicable framework.

The Government, authorities or other institutional parties may similarly authorise appropriate representatives under the governing provision.

Legal representation may be particularly important in DPDPA appeals involving:

• substantial monetary penalties;

• complex technological evidence;

• cross-border processing;

• interpretation of exemptions;

• jurisdictional disputes;

• significant procedural issues.

The availability of legal representation does not require every Data Principal to appoint counsel. The digital process should remain usable by individuals appearing without legal representation.

29. Benches, allocation and majority decisions

The TRAI Act contains institutional provisions concerning:

• distribution of business among TDSAT benches;

• transfer of cases by the Chairperson;

• decision by majority where more than one Member hears the matter.

These provisions facilitate management of the Tribunal’s expanding jurisdiction across telecom, information-technology, airport-regulation and data-protection matters.

For DPDPA appeals, allocation among benches should support:

• consistency;

• subject-matter competence;

• independence;

• absence of conflict;

• timely disposal.

Where Members differ, the decision is governed through the applicable majority framework rather than the personal preference of the presiding Member.

30. Civil-court exclusion under the TRAI Act and DPDPA

The TRAI Act excludes ordinary civil-court jurisdiction over matters within TDSAT’s assigned jurisdiction.

The DPDPA separately contains Section 39, barring civil courts from entertaining suits or proceedings concerning matters the Board is empowered to determine and preventing injunctions against action taken or proposed under the Act.

Together, these provisions establish a specialised statutory route:

1. Board determination
2. TDSAT appeal
3. Supreme Court appeal

A person cannot ordinarily bypass this framework by filing a civil suit seeking reconsideration of:

• the Board’s finding;

• a Board direction;

• a monetary penalty;

• TDSAT’s appellate determination.

This does not constitutionally exclude the writ jurisdiction of the High Courts or the Supreme Court. However, the existence of an effective statutory appeal is ordinarily a relevant consideration in the exercise of discretionary writ jurisdiction.

30.1 Communication and effect of TDSAT orders

31. Copy of every order

TDSAT must send a copy of every order to:

• the Data Protection Board;

• every party to the appeal.

This enables:

• the parties to know the result;

• the Board to implement the appellate ruling;

• modified directions to be reflected in the Board’s records;

• further-appeal periods to be calculated;

• enforcement under Section 30.

Receipt of the TDSAT order will also be important for calculating the ninety-day period for a further appeal to the Supreme Court.

32. Execution of TDSAT orders

Section 30 of the DPDPA provides the immediate execution framework for TDSAT orders. It treats the Tribunal’s order as executable in the manner of a civil-court decree.

This aligns with Section 19 of the TRAI Act, which similarly provides for execution of TDSAT orders as decrees and allows transmission to a civil court for enforcement.

The tribunal is not bound by the CPC when deciding the appeal, but its final order may still be enforced through a decree-like mechanism.

The two propositions are consistent:

• adjudication is flexible and guided by natural justice;

• enforcement receives the legal force of a civil decree.

33. Consequences of wilful non-compliance

The TRAI Act contains a separate provision dealing with wilful failure to comply with TDSAT orders.

Its application to a DPDPA appeal would require careful consideration of:

• the text of the DPDPA;

• the extent to which the TRAI Act provision applies to the additional jurisdiction;

• Section 30’s execution mechanism;

• the terms of the TDSAT order.

The safest conclusion is that a TDSAT order is binding and enforceable. A party cannot disregard it merely because the party intends to pursue a further appeal.

Unless stayed by the Supreme Court or otherwise lawfully suspended, the appellate order remains operative.

33.1 Time for disposal

34. Six-month target

TDSAT must deal with the appeal as expeditiously as possible and endeavour to dispose of it finally within six months from the date of presentation.

The words “endeavour shall be made” indicate a strong procedural target, not an automatic termination of jurisdiction after six months.

The Tribunal does not become powerless on the first day after the six-month period.

The target is nonetheless important because DPDPA appeals may involve:

• continuing personal data exposure;

• ongoing processing restrictions;

• significant penalties;

• suspended or cancelled Consent Manager registration;

• unresolved rights of Data Principals.

35. Written reasons for delay

If the appeal is not disposed of within six months, TDSAT must record reasons in writing.

The reasons should identify the actual circumstances preventing disposal, such as:

• complexity of evidence;

• necessary adjournments;

• admission of additional evidence;

• linked proceedings;

• inability to complete hearing;

• another concrete procedural reason.

A generic statement that the matter could not be completed because of workload may not adequately fulfil the accountability purpose of the provision unless sufficient context is provided.

Delay does not automatically invalidate the eventual order, but excessive or unexplained delay may be relevant in public-law review.

35.1 Digital appellate procedure

36. Digital office under Section 29(10) and Rule 22

TDSAT must, as far as practicable, function as a digital office for DPDPA appeals.

The digital-by-design elements expressly include:

• receipt of appeal;

• hearing;

• pronouncement of decision.

The Tribunal may use techno-legal measures so parties, witnesses and representatives do not need to be physically present.

This may include:

• portal-based appeals;

• electronic records;

• digital cause lists;

• online hearings;

• digital affidavits;

• secure document exchange;

• electronic orders;

• digital payment.

37. Digital functioning and natural justice

Digital procedure must not compromise:

• reasonable notice;

• access to the appeal record;

• ability to present submissions;

• ability to respond to evidence;

• accessibility for persons with disabilities;

• reliable authentication;

• confidentiality and security.

A technical failure attributable to the Tribunal’s system should not automatically be treated as:

• non-appearance;

• abandonment;

• failure to file;

• waiver of hearing.

38. Physical presence may still be required

The digital-office model operates without prejudice to TDSAT’s power to:

• summon a person;

• enforce attendance;

• examine the person on oath.

“As far as practicable” also allows an appropriate non-digital arrangement where:

• the evidence requires it;

• accessibility requires it;

• a technical limitation makes digital participation ineffective;

• the interests of justice justify physical attendance.

38.1 Further appeal to the Supreme Court

39. Section 18 of the TRAI Act

Section 29(9) applies Section 18 of the TRAI Act to an appeal against a TDSAT order made under the DPDPA.

The appeal lies directly to the Supreme Court of India.

The principal conditions are:

1. the order must not be merely interlocutory;

2. the appeal must rest on one or more grounds specified in Section 100 CPC;

3. no appeal lies against a consent decision or consent order;

4. the appeal must ordinarily be filed within ninety days;

5. delay may be condoned where sufficient cause prevented timely filing.

40. Exclusion of interlocutory TDSAT orders

A further appeal to the Supreme Court does not lie against an interlocutory TDSAT order.

Interlocutory orders may include procedural or temporary decisions that do not finally dispose of the appeal.

This creates an important distinction:

• an interim Board order may potentially be appealed to TDSAT under the broad language of Section 29(1);

• an interim or interlocutory TDSAT order cannot ordinarily be appealed further to the Supreme Court under Section 18 of the TRAI Act.

The parties must usually wait for the final TDSAT decision before pursuing the statutory Supreme Court appeal, subject to any separately available constitutional jurisdiction.

41. Grounds specified in Section 100 CPC

The further appeal is confined to the grounds specified in Section 100 of the Code of Civil Procedure.

In practical terms, the Supreme Court appeal is directed principally at a substantial question of law, rather than constituting a second complete factual appeal.

Potential legal questions may concern:

• interpretation of a DPDPA provision;

• jurisdiction of the Board or TDSAT;

• legal test for consent;

• scope of an exemption;

• interpretation of the penalty framework;

• procedural standard required by natural justice;

• legal effect of a direction;

• interaction between the DPDPA and another law.

Findings of fact are not ordinarily reopened merely because another view of the evidence is possible.

However, a purported factual finding may raise a substantial question of law where, for example:

• no evidence supports it;

• a legally inadmissible approach was adopted;

• material evidence was ignored in a manner producing legal perversity;

• the wrong burden or standard was applied.

42. No appeal from a consent order

No statutory appeal lies to the Supreme Court against a decision or order made by TDSAT with the consent of the parties.

This may become relevant where a DPDPA appeal concludes through:

• settlement;

• agreed modification;

• consent terms;

• another consensual disposal.

A party should therefore understand the finality consequences before consenting to the TDSAT order.

43. Ninety-day Supreme Court period

The further appeal must ordinarily be filed within ninety days from the TDSAT decision or order.

The Supreme Court may entertain a delayed appeal where sufficient cause prevented timely filing.

This differs from the first appeal:

The appellant should not assume the same limitation period applies at both levels.

43.1 Comparison with the GDPR

44. Closest GDPR equivalent

The closest GDPR provision is Article 78, which provides an effective judicial remedy against a legally binding decision of a supervisory authority.

Article 78 also provides a remedy where the supervisory authority:

• does not handle a complaint; or

• does not inform the data subject within three months about the progress or outcome of the complaint.

The GDPR does not prescribe a single EU-wide specialist tribunal equivalent to TDSAT. The remedy is exercised before the competent national courts according to the Member State’s procedural arrangements, subject to EU-law requirements of effectiveness and equivalence.

45. Tribunal-centred DPDPA review versus court-centred GDPR review

45.1 DPDPA

The statutory path is:

1. Data Protection Board
2. TDSAT
3. Supreme Court

45.2 GDPR

The challenge to the supervisory authority ordinarily follows:

1. Supervisory authority
2. Competent national court

The DPDPA therefore inserts a specialised appellate tribunal before the Supreme Court.

46. Parallel GDPR remedies and the DPDPA’s sequential model

The wider contrast is not limited to the appeal against the regulator.

The GDPR permits the data subject to pursue, concurrently:

• a complaint to the supervisory authority under Article 77;

• judicial review of the supervisory authority under Article 78;

• a direct judicial remedy against the controller or processor under Article 79;

• compensation under Article 82 where damage is established.

The Court of Justice has confirmed that the supervisory complaint and direct judicial remedy may be exercised concurrently and independently, subject to permissible national coordination that preserves effective protection.

The DPDPA adopts a more sequential structure:

1. internal grievance before the Data Fiduciary or Consent Manager;

2. complaint to the Board after exhaustion under Section 13;

3. appeal to TDSAT;

4. further appeal to the Supreme Court.

The DPDPA does not create a general equivalent to Article 79 allowing the Data Principal to bring a parallel civil action against the Data Fiduciary or Data Processor for the same DPDPA infringement.

It also does not create a general compensation right equivalent to Article 82 GDPR.

47. Regulator inaction

GDPR Article 78 expressly gives a judicial remedy when a supervisory authority fails to act or communicate progress.

Section 29 is tied to an order or direction. It does not expressly address complete Board inaction.

This is a material difference.

A person affected by Board inaction under the DPDPA may need to rely on:

• applicable public-law remedies;

• constitutional judicial review;

• another legal mechanism, rather than an ordinary Section 29 appeal where no order or direction exists.

48. Nature of review

Under both frameworks, an enforcement-authority decision must be subject to effective review.

TDSAT’s express power to:

• confirm;

• modify;

• set aside, gives it a broad first appellate jurisdiction.

Under GDPR Article 78, national courts must provide effective review of the supervisory authority’s legally binding decisions and complaint handling.

The institutional forms differ, but both require review capable of addressing:

• legal error;

• jurisdiction;

• procedural fairness;

• exercise of discretion;

• adequacy of enforcement.

48.1 Key interpretive conclusions

49. Section 29 is the ordinary challenge to a Board decision

An aggrieved person should normally use Section 29 rather than attempt to relitigate the Board’s determination before a civil court.

The existence of constitutional judicial review remains legally distinct from the statutory appeal.

50. The appeal period runs from receipt

The legally effective date of service is critical.

Digital service systems should create reliable records showing:

• what was served;

• when it was made available;

• when the recipient was notified;

• when receipt was acknowledged.

51. Filing does not stay the order

The Board’s order continues unless a stay or suspension is granted.

Interim relief should be sought expressly and promptly where needed.

52. TDSAT’s first appeal is broad

TDSAT may review:

• law;

• fact;

• procedure;

• jurisdiction;

• natural justice;

• directions;

• penalty assessment.

The Supreme Court appeal is narrower and principally concerned with substantial questions of law.

53. Rule 22 supplements the TRAI Act

Rule 22 provides the DPDPA-specific digital appeal framework.

The TRAI Act supplies the tribunal’s wider procedural powers, including natural-justice procedure, evidence powers, legal representation, bench administration and the Supreme Court appeal route.

54. TDSAT cannot create remedies absent from the DPDPA

The power to modify or set aside a Board order does not authorise TDSAT to award compensation where the DPDPA provides no general compensation remedy.

55. Digital procedure must preserve appellate access

Digital design should simplify, rather than restrict:

• filing;

• hearing;

• representation;

• evidence submission;

• receipt of orders.

Fee waiver, accessible systems and fair treatment of technical failure are central to an effective digital appeal.

Conclusion

Section 29 establishes a comprehensive first appeal from the Data Protection Board to TDSAT.

Any person directly aggrieved by a Board order or direction may appeal. The appeal must ordinarily be filed within sixty days from receipt, but TDSAT may condone delay upon sufficient cause. Rule 22 requires digital filing and digital payment of the applicable TRAI-linked fee, while allowing the TDSAT Chairperson to reduce or waive the fee.

TDSAT must provide a meaningful hearing and may:

• confirm the Board’s decision;

• modify it;

• set it aside;

• pass an appropriate consequential order within the DPDPA framework.

Its procedure is not strictly governed by the CPC. It is guided by natural justice, possesses the relevant civil-court-like evidence powers under Section 16 of the TRAI Act and may regulate its own procedure. The Tribunal’s digital-office status does not diminish its power to compel attendance and examine persons on oath.

The appeal should be disposed of expeditiously, with an endeavour to conclude it within six months. Failure to meet that period does not terminate jurisdiction, but reasons for delay must be recorded.

A further appeal lies to the Supreme Court under Section 18 of the TRAI Act. It excludes interlocutory and consent orders, must ordinarily be brought within ninety days and is limited to the legal grounds associated with Section 100 CPC.

Compared with the GDPR, the DPDPA creates a sequential and tribunal-centred remedy. The GDPR allows parallel supervisory complaints, direct judicial proceedings against controllers or processors and separate compensation claims. The DPDPA ordinarily requires internal grievance exhaustion, Board adjudication, TDSAT appeal and then a narrower Supreme Court appeal.

Key point

The controlling proposition is that Section 29 gives TDSAT broad first-appellate authority over the legality, factual basis, procedure, directions and penalties of the Data Protection Board, while the TRAI Act supplies the Tribunal’s natural-justice procedure, evidentiary powers, legal-representation framework, decree-like enforcement architecture and a narrower further appeal to the Supreme Court.