What is the maximum penalty under the DPDP Act?

Reviewed by: Santosh Raut
Senior IT Architect & Privacy Technology Consultant
Last Updated: 05 June 2026

Answer:

The DPDP Act provides financial penalties of up to Rs 250 crore for failure to take reasonable security safeguards to prevent a personal data breach. Other listed defaults include up to Rs 200 crore for failing to notify a breach or to fulfil obligations relating to children, and up to Rs 50 crore for other breaches. Penalties are imposed by the Data Protection Board after inquiry.
penalty 250 crore 200 crore breach board fine schedule