Expanded enforcement targets principals, students, and officials: The circular set out legal action for nodal-centre principals, students who circulate papers on social media, and DDPUs if question papers are downloaded on more than one IP address.

Institutional penalties include grant withdrawal and permanent derecognition: Aided colleges risk grant withdrawal recommendations, and unaided or affiliated colleges risk permanent cancellation of recognition if confidentiality is not maintained or leaks occur.

Printing and digital controls are specified as anti-leak measures: Measures include restricting access to printing houses, deleting soft copies, destroying extra prints, using non-tamperable seals, and monitoring a single IP address for downloads.