1. Executive Summary: Rights Come With Duties

Sections 4-14 give Data Principals powerful rights. Section 15 says: "Don't abuse them."

This is the "responsibility clause" - balancing individual rights with societal interests and preventing system abuse.

1.1 The Five Duties Summary Table

2. Philosophical Foundations: Reciprocal Obligations

2.1 Immanuel Kant: Duty Ethics (Deontology)

Kant's Categorical Imperative: "Act only according to that maxim whereby you can, at the same time, will that it should become a universal law."

Application to Section 15:

Test: What if EVERYONE abused data rights?

• If everyone filed false complaints → grievance system collapses
• If everyone impersonated others → trust in digital identity collapses
• If everyone used erasure to destroy evidence → justice system collapses
• If everyone made false correction claims → data accuracy meaningless

Conclusion: Such behavior cannot be universalized. Therefore, you have a DUTY not to behave this way.

Kant's Principle: Treat people as ends, not means.

Using data rights to manipulate or harm others treats them as means to your ends. Section 15 prohibits this.

2.2 Social Contract Theory (Rousseau, Locke, Hobbes)

Core Idea: Rights exist within a social contract. You get rights FROM society, you owe duties TO society.

Rousseau (The Social Contract, 1762): "Each of us puts his person and all his power in common under the supreme direction of the general will."

Application:

• Society gives you data rights (Sections 4-14)
• In exchange, you must not abuse them (Section 15)
• This reciprocity maintains social order

Locke's State of Nature: Without duties, we'd have "state of nature" - chaos where everyone pursues self-interest without restraint.

2.3 Aristotle: Virtue Ethics

Concept: Virtue is the mean between two extremes.

Application to Data Rights:

• Deficiency: Never exercising your rights (letting others exploit you)
• VIRTUE (Golden Mean): Exercising rights responsibly, with integrity
• Excess: Abusing rights, weaponizing them against others

Section 15 promotes the virtuous mean - responsible exercise of rights.

3. Constitutional Framework: Fundamental Duties

3.1 Article 51A: Fundamental Duties

Article 51A (added by 42nd Amendment, 1976): Lists fundamental duties of every citizen.

Selected Duties:

• (a) To abide by the Constitution and respect its ideals and institutions
• (c) To uphold and protect the sovereignty, unity and integrity of India
• (h) To develop scientific temper, humanism and the spirit of inquiry and reform
• (j) To strive towards excellence in all spheres of individual and collective activity

Section 15 as Statutory Duties: Similar to Article 51A, Section 15 imposes specific duties related to data protection.

Parallel:

• Article 51A = General civic duties
• Section 15 = Specific data-related duties
• Both balance rights with responsibilities

3.2 Rights-Duties Nexus in Indian Jurisprudence

Ranganath Misra v. Union of India, (2003) 2 SCC 747:

Application: While DPDPA Part 3 gives rights, Part 4 (including Section 15) imposes duties. Consistent with constitutional structure.

4. Section 15(a): Comply With All Applicable Laws

Statutory Language: "comply with all applicable laws for the time being in force while exercising her rights under this Act"

Core Principle: DPDPA rights are not a license to break OTHER laws.

4.1 What This Duty Means

You cannot use DPDPA rights to:

• ✗ Evade legal obligations
• ✗ Destroy evidence
• ✗ Obstruct justice
• ✗ Facilitate crimes
• ✗ Circumvent regulatory requirements

4.2 Violation Examples

4.3 Legitimate vs Illegitimate Use

5. Section 15(b): No False or Frivolous Grievances

Statutory Language: "not register a false or frivolous grievance or complaint with the Data Fiduciary or the Board, as the case may be"

Two Prohibited Types:

1. FALSE: Complaints that are knowingly untrue
2. FRIVOLOUS: Complaints that lack any serious purpose, are vexatious, or made to harass

5.1 What is "False" Complaint?

Definition: Complaint based on facts you KNOW to be untrue.

5.2 What is "Frivolous" Complaint?

Definition: Complaint that:

• Has no legal basis or merit
• Is vexatious (intended to annoy/harass)
• Lacks any serious purpose
• Wastes system resources

6. Section 15(c): No Impersonation

Statutory Language: "not impersonate another person while providing her personal data for any document, unique identifier, proof of identity or proof of address"

Core Prohibition: Don't pretend to be someone else when providing identity information.

6.1 What is "Impersonation"?

Impersonation = Falsely representing yourself as another person.

6.2 Legitimate Name Variations vs Impersonation

7. Section 15(d): No Material Suppression

Statutory Language: "not suppress any material information while providing her personal data for any document, unique identifier, proof of identity or proof of address, if such suppression is prohibited by law"

Key Phrase: "if such suppression is prohibited by law"

This means: You can't hide information that law REQUIRES you to disclose.

7.1 What is "Material Information"?

Material = Significant, relevant, could affect decision.

Not material: Trivial details that don't matter.

7.2 When is Suppression "Prohibited by Law"?

7.3 General Privacy vs Specific Disclosure Requirements

Key Principle: Section 15(d) does NOT override your general privacy rights. It only applies when specific law requires disclosure.

Example:

• Shopping website asks: "What's your income?" → You can refuse (no legal requirement to disclose)
• Bank asks for income proof for loan → You must provide (banking regulations require it)

8. Section 15(e): Provide Verifiably Authentic Information

Statutory Language: "furnish only such information, as is verifiably authentic, while exercising the right to correction or erasure under this Act"

Applies To: Section 12 correction and erasure requests.

Core Requirement: When requesting correction, provide TRUE facts with proof.

8.1 What is "Verifiably Authentic"?

Verifiable = Can be proven true through evidence.

Authentic = Genuine, not fake.

9. Consequences of Violating Duties

9.1 Direct Consequences Under DPDPA

9.2 Good Faith Defense

CRITICAL SAFEGUARD: Section 15 targets bad faith violations.

Good faith mistakes/errors are NOT violations:

Burden of Proof: Accuser must prove bad faith (intentional violation). If you can show good faith, no violation.

10. Comparative Analysis: Duties in Other Jurisdictions

India's Approach is Unique:

• ✓ Most explicit duties section globally
• ✓ Balances individual rights with societal interests
• ✓ Prevents system abuse proactively
• ✓ Aligned with Indian constitutional tradition (Fundamental Duties in Article 51A)

Why GDPR Doesn't Have Explicit Duties:

• European legal tradition emphasizes individual rights more strongly
• Relies on general principles of good faith (civil law concept)
• Controllers can refuse unreasonable requests (built-in safeguard)

India's Approach Advantage: Clarity. Data Principals know exactly what they can/cannot do.

11. Conclusion: Rights & Responsibilities in Balance

Section 15 completes the DPDPA framework by recognizing a fundamental truth: Rights without responsibilities lead to chaos.

The Five Duties - Final Summary:

1. Comply with laws (15(a)): Don't use data rights to break other laws
2. No frivolous complaints (15(b)): Don't spam or abuse grievance systems
3. No impersonation (15(c)): Don't pretend to be someone else
4. No suppression (15(d)): Don't hide legally required information
5. Authentic information (15(e)): Correction requests must be truthful

Remember:

• ✓ Good faith mistakes are OK - Section 15 targets intentional bad actors, not honest errors
• ✓ Your rights remain strong - Duties don't diminish rights, they protect them from abuse
• ✓ Balance is key - Exercise rights responsibly, and they'll remain effective for everyone

Section 15 ensures the DPDPA system works for everyone by preventing the few from ruining it for the many.