The limitation of liability clause in a master services agreement (MSA) under India law

Standard Position

In Indian MSAs, limitation of liability clauses cap the financial exposure of the service provider for breaches, negligence, or service failures. The standard market position typically limits liability to either a multiple of fees paid (commonly 12 months of service fees) or a fixed cap, with complete exclusions for indirect, consequential, and punitive damages. Service providers routinely seek to exclude liability for client data loss, third-party claims, and force majeure events. Service recipients push back to carve out liability for gross negligence, willful misconduct, data protection breaches, and confidentiality violations. The enforceability and reasonableness of caps are heavily fact-dependent under Indian law.

Legal Basis

The Indian Contract Act, 1872 permits parties to contract out of liability through "reasonableness" doctrine embedded in Sections 31 and 55. However, Section 23 renders void any clause that is "opposed to public policy." Indian courts (notably in Wills' United India Insurance Co. Ltd. v. Koolwal and Shriram EPC Ltd. v. Nimbus Infrastructure Pvt. Ltd.) have struck down one-sided liability caps as "unconscionable" or against public policy when they eliminate substantive remedies or shield gross negligence. The Consumer Protection Act, 2019 may apply if the service recipient qualifies as a "consumer" (less common in B2B), potentially voiding exclusions of statutory rights. The Information Technology Act, 2000 and National Digital Infrastructure scheme regulations impose non-waivable duties on service providers handling sensitive data or critical systems; liability caps cannot override statutory data-protection or security obligations.

Drafting and Negotiation

Craft liability caps as a genuine pre-estimate of loss, proportional to contract value and service risk. Frame them as "for direct damages arising from service provider's negligence or breach" rather than blanket exclusions. Always carve out: (1) gross negligence, willful misconduct, and fraud; (2) breach of confidentiality; (3) data protection and privacy obligations under the IT Act, 2000 and applicable data-protection rules; (4) infringement of third-party intellectual property rights; (5) indemnity obligations. For service recipients, negotiate a two-tier structure: a lower cap for ordinary breach (e.g., service downtime), a higher cap for gross negligence or data loss. Ensure that the clause explicitly states that neither party excludes liability for statutory obligations or mandatory consumer/employee protections. Consider a notice-and-cure mechanism: liability accrues only after 30 days' written notice and reasonable opportunity to remedy. Document the negotiation trail (emails, redlines) to evidence that both parties genuinely agreed the cap was reasonable—courts examine the bargaining power and commercial context closely.

Common Pitfalls

Drafters often use sweeping language like "in no event shall" without carving out mandatory exceptions, inviting judicial scrutiny and partial severability. Capping liability at zero for "any indirect loss" is risky if the clause appears to be a disguised attempt to avoid liability for foreseeable harm. Failing to define key terms ("indirect," "consequential," "direct") creates ambiguity courts resolve against the drafter. Stating that liability caps apply to force majeure or third-party acts (outside the provider's control) may be unenforceable. Over-reliance on single-sentence disclaimers in schedules, rather than substantive clauses, invites challenges that the party did not genuinely assent. Neglecting to reconcile the liability clause with separate indemnity, insurance, or SLA clauses can create conflicts. Imposing liability caps on pre-contract representations (e.g., authority to sign) may fail under Section 11 of the Indian Contract Act if the misrepresentation induced the agreement.

Sample language

Except for breaches of confidentiality, data protection obligations, gross negligence, willful misconduct, fraud, or infringement of intellectual property rights, the service provider's total aggregate liability arising out of or related to this MSA shall not exceed the fees paid by the service recipient in the 12 months immediately preceding the event giving rise to liability, or USD 100,000, whichever is lower. Neither party shall be liable for indirect, incidental, consequential, special, or punitive damages, including lost profits or business interruption, even if advised of the possibility of such damages. Liability caps do not limit either party's obligations under data protection laws, the Information Technology Act, 2000, or indemnity obligations under this MSA.

This is general drafting guidance, not legal advice, and not a substitute for advice on your specific facts and jurisdiction. Sample language is a starting point to adapt, not a finished clause.