A citizen's personal data is processed without his informed consent, his grievance to the data fiduciary is not redressed, and he decides to take statutory recourse. Under the Digital Personal Data Protection Act, 2023, the citizen may:

The DPDP Act, 2023 builds a layered remedy: a data fiduciary must establish an effective GRIEVANCE REDRESSAL mechanism and designate a Data Protection Officer for the purpose (Section 14 read with the rules); a data principal must first approach the fiduciary, and if his grievance is not satisfactorily redressed within the prescribed period, he may take his COMPLAINT to the DATA PROTECTION BOARD OF INDIA (Section 15/(23) and the Act's adjudication machinery), which has the power to inquire and impose penalties. Exhausting the fiduciary's redressal mechanism is the threshold for the statutory complaint. This administrative-adjudication route is the Act's enforcement spine.