The Board has the powers to impose the following penalties:
Sr. No. Non-compliance/violation Penalty Breach in observing the obligation of Data Fiduciary to take reasonable security safeguards to prevent data breach INR 250 crores Breach in observing the obligation to give the Board or affected Data Principal notice of a personal data breach INR 200 crore Breach in observing obligations regarding children’s personal data INR 200 crore Breach in observance of additional obligations of Significant Data Fiduciary under section 10 INR 150 crore Breach of term of voluntary undertaking accepted by the Board under Section 32 Penalty vary based on the breach Breach of other provision of this Act or the rules made thereunder INR 50 crores
