Section 133 at a Glance
Contents
1. Statutory Text of Section 133
(1) Where any person engaged in connection with the collection of statistics under section 151 or compilation or computerisation thereof or if any officer of central tax having access to information specified under sub-section (1) of section 150, or if any person engaged in connection with the provision of service on the common portal or the agent of common portal, wilfully discloses any information or the contents of any return furnished under this Act or rules made thereunder otherwise than in execution of his duties under the said sections or for the purposes of prosecution for an offence under this Act or under any other Act for the time being in force, he shall be punishable with imprisonment for a term which may extend to six months or with fine which may extend to twenty-five thousand rupees, or with both.
(2) Any person—
(a) who is a Government servant shall not be prosecuted for any offence under this section except with the previous sanction of the Government;
(b) who is not a Government servant shall not be prosecuted for any offence under this section except with the previous sanction of the Commissioner.
This section is short, but it creates a specific criminal liability around unauthorised disclosure by people who have access to GST information because of their role.
2. Section 133 Explained in Simple Language
GST returns and GST-system information can contain commercially sensitive information such as turnover, purchases, sales, tax payments, ITC positions, supplier/customer details and other information supplied to the tax administration.
Section 133 recognises that people working with the GST information ecosystem may have access to information that ordinary members of the public cannot access. The law therefore places a specific responsibility on certain persons not to wilfully disclose that information except in the circumstances permitted by the provision.
The basic idea
- A person gets access to specified GST information because of a defined role.
- The person wilfully discloses the information or return contents.
- The disclosure is outside the person's permitted duties or the specified prosecution purpose.
- The conduct can attract the punishment provided in Section 133.
3. Who Can Be Covered by Section 133?
The provision identifies several categories of persons whose roles may give them access to protected GST information.
| Category | Why access may exist | Practical risk |
|---|---|---|
| Person connected with collection of statistics under Section 151 | May handle information collected for statistical purposes. | Using or disclosing collected information outside permitted duties. |
| Person connected with compilation/computerisation of Section 151 statistics | May process or consolidate statistical information. | Unauthorised extraction, copying or disclosure. |
| Officer of Central Tax with access to Section 150(1) information | May access information furnished under the information-return framework. | Sharing protected information outside official purposes. |
| Person engaged in providing services on the common portal | May have technical/system access required to operate GST services. | Using technical access to disclose taxpayer information. |
| Agent of the common portal | May perform authorised portal-related functions. | Unauthorised disclosure of information accessed through that role. |
The wording is therefore broader than “GST officer” alone. Certain persons working on statistics, technology and common-portal services can also fall within the section.
4. What Information Is Protected?
4.1 Information covered by the wording
Section 133 refers to any information in the specified situations and specifically to the contents of any return furnished under the CGST Act or Rules.
The wording is therefore not limited to a single field such as turnover or GSTIN. Depending on the person's role and the source of the information, it can encompass information handled through the statutory statistics, information-return and common-portal framework.
4.2 Why return contents are sensitive
A GST return can reveal business activity, tax liabilities, ITC positions and transaction-related information. Unauthorised disclosure could therefore affect taxpayer confidentiality and commercial interests.
4.3 System access is not the same as permission to disclose
5. What Does “Wilfully Discloses” Mean?
The word “wilfully” is important. Section 133 does not simply say that every accidental exposure of information automatically results in the punishment described by the section.
In a real investigation, the circumstances surrounding the disclosure would matter. Relevant questions may include:
- Who accessed the information?
- What role gave that person access?
- Was the information actually disclosed?
- To whom was it disclosed?
- Was the disclosure authorised?
- Was it part of the person's official duty?
- Was it for a permitted prosecution purpose?
- What records, system logs, communications or other evidence exist?
6. When Is Disclosure Permitted Under Section 133?
Section 133(1) does not prohibit disclosure when it is made in the execution of the relevant person's duties under the specified provisions. It also expressly permits disclosure for the purposes of prosecution for an offence under the CGST Act or another law in force.
| Situation | Section 133 perspective |
|---|---|
| Disclosure while properly performing statutory duties | The section's prohibition is not aimed at authorised disclosure made in execution of those duties. |
| Disclosure for prosecution of an offence | Expressly recognised by the provision. |
| Personal sharing for curiosity | Not a statutory duty; potentially problematic if the disclosure is wilful and otherwise covered. |
| Sharing taxpayer data with friends or unrelated persons | Potential confidentiality violation and may attract Section 133 where statutory conditions are met. |
| Publicly posting return contents | High-risk conduct where the information is covered and the disclosure is unauthorised. |
7. Punishment Under Section 133
Section 133(1) provides three possible forms of punishment:
The wording “may extend to” means these are statutory maximums. It does not mean that every proven case automatically receives six months' imprisonment or ₹25,000 fine.
8. Previous Sanction Before Prosecution
Section 133(2) creates different sanction requirements depending on whether the accused person is a Government servant.
| Person | Required previous sanction |
|---|---|
| Government servant | Previous sanction of the Government. |
| Not a Government servant | Previous sanction of the Commissioner. |
This is a procedural safeguard. The sanction requirement should not be confused with a finding of guilt.
Why the distinction matters
A Government officer and a private-sector/common-portal service person may have different sanction authorities under Section 133(2). When reviewing a prosecution matter, the identity and employment status of the person should therefore be established carefully.
9. Connection With Sections 150 and 151
Section 133 cannot be fully understood without seeing why Sections 150 and 151 are mentioned in it.
| Section | Broad subject | Connection |
|---|---|---|
| Section 150 | Obligation to furnish information return | Section 133 covers certain Central Tax officers having access to information specified under Section 150(1). |
| Section 151 | Power to collect statistics | Section 133 covers persons engaged in collection, compilation or computerisation of statistics under Section 151. |
This cross-reference shows that Section 133 is part of a larger information-management framework: GST authorities may collect or receive information for administration, but people handling that information remain subject to statutory confidentiality obligations.
10. Practical Examples
An officer has access to taxpayer return information because of official duties and sends selected return figures to a friend who has no official need for them. If the statutory conditions are satisfied, the conduct can raise Section 133 concerns.
Protected information is shared with authorised officials as part of a lawful GST investigation. Section 133's express reference to execution of duties and prosecution purposes is relevant.
A person working on common-portal services has technical access and deliberately copies taxpayer return data for an unrelated personal purpose. The fact that the person technically could access the data does not establish authority to disclose it.
An employee accidentally selects the wrong email address while sending an authorised work document. Whether Section 133 applies cannot be determined merely from the fact of an accidental transmission; the statutory requirement of wilful disclosure and all circumstances must be considered.
A person covered by the section deliberately publishes confidential return contents online without an official purpose. This is materially different from an authorised official disclosure and may create Section 133 exposure if the statutory elements are established.
Information is supplied to the competent authorities for prosecution of an offence under GST or another law. The prosecution-purpose exception expressly recognised by Section 133 is relevant.
A person working on GST statistics combines data for an authorised statistical report. Proper processing in execution of assigned duties is different from deliberately disclosing taxpayer-level information outside the authorised purpose.
A person with privileged GST-system access takes screenshots containing identifiable taxpayer information and circulates them in a private messaging group. The fact that the group is private does not automatically make the disclosure authorised.
A technology contractor is given access to perform a defined portal maintenance task. The contractor later uses the access to obtain unrelated taxpayer information and disclose it. The role described in Section 133 includes persons engaged in providing common-portal services, making access governance important.
A company's own tax employee handles the company's GST returns. Section 133 should not automatically be applied to every employee who sees a GST return; the section specifically identifies the categories of persons and circumstances described in subsection (1).
11. Practical Data-Confidentiality Controls
Section 133 is directed at specified persons in the GST information ecosystem, but the underlying confidentiality principle is also useful for businesses and technology teams that handle GST data.
For government/tax administration environments
- Role-based access control.
- Need-to-know permissions.
- Audit logs for sensitive data access.
- Controls over bulk export and downloads.
- Monitoring of unusual data access.
- Clear procedures for official disclosure.
- Employee and contractor confidentiality obligations.
- Incident escalation when sensitive information is exposed.
For GST technology/service providers
- Separate production and test data.
- Mask taxpayer data in development environments.
- Restrict database administrator privileges.
- Maintain access logs.
- Disable unnecessary export functionality.
- Document the purpose of every privileged access role.
For taxpayers and finance teams
- Do not circulate GST returns unnecessarily.
- Protect GST portal credentials and downloaded files.
- Use controlled folders for GST reports.
- Restrict access to sensitive vendor/customer tax data.
- Use secure channels for sharing documents with advisers.
12. What a Section 133 Investigation May Need to Establish
A practical investigation would ordinarily need to examine the statutory elements rather than simply asking whether information was visible to the person.
| Question | Evidence that may matter |
|---|---|
| Was the person within a category covered by Section 133? | Employment/contract records, role description, access authorisation. |
| Did the person have access to the relevant information? | System logs, permissions, access records. |
| Was information or return content disclosed? | Emails, messages, files, screenshots, downloads, witness evidence. |
| Was the disclosure wilful? | Communications, repeated conduct, instructions, circumstances. |
| Was the disclosure part of official duties? | Work order, assigned task, official correspondence, authorisation. |
| Was it for prosecution purposes? | Investigation/prosecution records and official communication. |
| What sanction is required? | Government or Commissioner sanction depending on status. |
14. Common Misunderstandings
“Anyone who sees a GST return is covered by Section 133.”
No. The section identifies particular categories of persons connected with specified GST information, statistics and common-portal services.
“Any accidental disclosure automatically means six months in jail.”
No. The provision uses the word “wilfully,” and the facts and statutory requirements must be examined.
“Section 133 prevents all disclosure of GST information.”
No. The section expressly recognises disclosure in execution of relevant duties and for prosecution purposes.
“The ₹25,000 fine is mandatory.”
No. It is the maximum fine stated in the section. The provision permits imprisonment up to six months, fine up to ₹25,000, or both.
“Government employees and private contractors have the same sanction authority.”
No. Section 133(2) distinguishes Government servants from persons who are not Government servants.
“Having database access means having permission to disclose data.”
No. Access necessary for a technical or administrative role does not itself establish authority to disclose the information for unrelated purposes.
15. Practical Compliance Checklist
- Identify who has access to GST taxpayer information.
- Document why each role requires that access.
- Use role-based and least-privilege access controls.
- Maintain logs for sensitive data access and exports.
- Control screenshots, downloads and bulk exports.
- Document authorised disclosure procedures.
- Immediately escalate suspected unauthorised disclosure.
- Preserve logs, messages and files relevant to an incident.
- Determine whether the person falls within Section 133(1).
- Check whether the disclosure was wilful and whether a statutory exception applies.
- If prosecution is contemplated, verify the applicable sanction under Section 133(2).
16. SEO Questions People Commonly Search
- What is Section 133 of the CGST Act?
- What is Section 133 GST in simple language?
- What is the punishment for disclosure of GST return information?
- Can a GST officer disclose taxpayer information?
- Is GST return data confidential?
- What happens if GST portal data is disclosed without permission?
- What is the liability of officers under Section 133?
- What is the fine under Section 133 of CGST Act?
- What is the maximum imprisonment under Section 133?
- Who can be prosecuted under Section 133?
- What sanction is required for prosecution under Section 133?
- How is Section 133 connected with Section 150 and 151?
17. Frequently Asked Questions
1. What is Section 133 of the CGST Act?
It provides liability for specified persons who wilfully disclose GST information or return contents outside the permitted circumstances.
2. What is the maximum punishment under Section 133?
Imprisonment may extend to six months, or fine may extend to ₹25,000, or both.
3. Does Section 133 apply only to GST officers?
No. It also covers specified persons connected with statistics and common-portal services, as well as certain Central Tax officers having access to specified information.
4. What does “wilfully discloses” mean?
It indicates that the disclosure must be considered in light of the circumstances and the statutory requirement of wilfulness. Mere access to information does not automatically establish the offence.
5. Can GST return information be disclosed for prosecution?
Section 133 expressly recognises disclosure for the purposes of prosecution for an offence under the CGST Act or another law in force.
6. Can information be disclosed while performing official duties?
The provision does not prohibit disclosure made in execution of the relevant duties under the specified provisions.
7. What happens if a Government servant is accused under Section 133?
Section 133(2)(a) requires previous sanction of the Government before prosecution.
8. What happens if a non-Government person is accused?
Section 133(2)(b) requires previous sanction of the Commissioner before prosecution.
9. Does Section 133 apply to common portal service providers?
Yes. The provision expressly covers persons engaged in providing services on the common portal and the agent of the common portal.
10. Is ₹25,000 the mandatory fine?
No. It is the maximum fine provided by the section.
11. Is six months' imprisonment automatic?
No. It is the maximum term specified by the section, not an automatic sentence.
12. Does Section 133 cover every data leak?
No. The section has specific categories of persons and a specific statutory formulation concerning wilful disclosure.
13. How does Section 133 relate to Section 150?
Section 133 refers to Central Tax officers having access to information specified under Section 150(1).
14. How does Section 133 relate to Section 151?
It covers persons engaged in the collection, compilation or computerisation of statistics under Section 151.
15. Is Section 133 a taxpayer penalty?
It is primarily directed at officers and certain other persons handling specified GST information, rather than an ordinary taxpayer return-filing penalty.
16. What should an organisation do after suspected GST data disclosure?
Preserve access logs and communications, identify the information disclosed, determine who accessed it and under what role, investigate authorisation, and obtain appropriate legal advice where prosecution or statutory reporting may be relevant.
18. Quick Revision – Section 133
- Section 133 = liability of officers and certain other persons for unauthorised disclosure.
- It covers specified persons connected with Section 151 statistics, specified Section 150 information and common-portal services.
- The provision concerns wilful disclosure of information or return contents.
- Disclosure in execution of relevant duties is outside the prohibited conduct described in the section.
- Disclosure for prosecution purposes is also expressly recognised.
- Maximum imprisonment: 6 months.
- Maximum fine: ₹25,000.
- Government servant → previous sanction of Government.
- Non-Government person → previous sanction of Commissioner.
- Access to information is not the same as permission to disclose it.
- Maintain strong access control, logging and confidentiality procedures around sensitive GST information.
19. Legal Disclaimer
This page is provided for general educational and compliance-workflow purposes. GST law, rules, notifications, circulars, instructions and judicial interpretation can change, and the legal position can depend on the facts, date, jurisdiction and exact proceeding. Before taking a tax, accounting, litigation, employment or data-confidentiality decision, verify the law applicable to the relevant period and obtain professional advice where appropriate. This page is not a substitute for professional legal advice.