---
title: "DPDP Act Schedule: Penalties up to Rs 250 Crore | dpdpr.in"
description: "The Schedule to the DPDP Act 2023: every penalty amount by breach type, up to Rs 250 crore for failing to protect personal data, explained."
url: "https://dpdpr.in/act/schedule/"
canonical: "https://dpdpr.in/act/schedule/"
site: "dpdpr.in"
updated: "2026-11-02"
disclaimer: "Independent reference, not legal advice. Not affiliated with the Government of India or MeitY."
---

# The Schedule: penalties under the DPDP Act

The Board may impose these penalties under [section 33](https://dpdpr.in/act/section-33/) after an inquiry finds a significant breach. The table is quoted exactly from the Act. See also the [penalties guide](https://dpdpr.in/guides/penalties/).

THE SCHEDULE \[See section 33 (1)\], quoted from the Act ([page 21](https://www.meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf#page=21))

| Sl. No. | Breach of provisions of this Act or rules made thereunder | Penalty |
|---|---|---|
| 1. | Breach in observing the obligation of Data Fiduciary to take reasonable security safeguards to prevent personal data breach under sub-section (5) of section 8. | May extend to two hundred and fifty crore rupees. |
| 2. | Breach in observing the obligation to give the Board or affected Data Principal notice of a personal data breach, under sub-section (6) of section 8. | May extend to two hundred crore rupees. |
| 3. | Breach in observance of additional obligations in relation to children under section 9. | May extend to two hundred crore rupees. |
| 4. | Breach in observance of additional obligations of Significant Data Fiduciary under section 10. | May extend to one hundred and fifty crore rupees. |
| 5. | Breach in observance of the duties under section 15. | May extend to ten thousand rupees. |
| 6. | Breach of any term of voluntary undertaking accepted by the Board under section 32. | Up to the extent applicable for the breach in respect of which the proceedings under section 28 were instituted. |
| 7. | Breach of any other provision of this Act or the rules made thereunder. | May extend to fifty crore rupees. |

## When this takes effect

- Whole Schedule **Starts 13 May 2027** 191 days to go

Source: [G.S.R. 843(E)](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf) and [rule 1](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf). [All deadlines](https://dpdpr.in/deadlines/)