Legal Consequences

Fines & Penalties Breakdown

The DPDP Act moves away from criminal imprisonment for non-compliance and instead introduces staggering financial penalties—up to ₹250 Crore per violation—designed to make compliance a boardroom priority.

Violation / Offense Maximum Penalty

Failure to prevent a Data Breach

Failure of a Data Fiduciary to take reasonable security safeguards to prevent a personal data breach.
Up to ₹250 Crore
(~$30 Million USD)

Failure to notify a Data Breach

Failure to notify the Data Protection Board and affected Data Principals in the event of a personal data breach.
Up to ₹200 Crore
(~$24 Million USD)

Violating Children's Data Rules

Failure to observe additional obligations in relation to children (e.g., tracking, targeting, or lacking parental consent).
Up to ₹200 Crore
(~$24 Million USD)

Significant Data Fiduciary Failures

Failure of a Significant Data Fiduciary to fulfill its additional obligations (appointing a DPO, conducting audits, Data Protection Impact Assessments).
Up to ₹150 Crore
(~$18 Million USD)

Any Other Non-Compliance

Breach of any other provision of the Act or Rules (e.g., failing to honor a Data Principal's request to erase data).
Up to ₹50 Crore
(~$6 Million USD)

How does the Board decide the fine amount?

The ₹250 Crore figure is a maximum cap. When determining the exact financial penalty, the Data Protection Board will consider several factors:

Voluntary Undertaking

Under Section 32, a company facing an inquiry can submit a "Voluntary Undertaking" to the Board. This means you admit a mistake, promise to fix it, and agree to specific conditions. If accepted by the Board, this can act as a bar on proceedings, potentially saving the company from massive fines and protracted litigation.

The Appeals Process

If a Data Fiduciary is unhappy with the Data Protection Board's decision or fine, they have the right to appeal to the Telecom Disputes Settlement and Appellate Tribunal (TDSAT). If TDSAT's decision is also unfavorable, the final appeal lies directly with the Supreme Court of India.