The Digital Personal Data Protection Act, 2023

In one line

What this Act says

India's first comprehensive data-protection law — companies need your consent to use your personal data, must protect it, and answer to a Data Protection Board.

• Failure to take reasonable security safeguards / data breach

  Schedule (entry 1)

  Penalty up to ₹250 crore.

• Failure to notify a personal-data breach

  Schedule (entry 2)

  Penalty up to ₹200 crore.

• Non-compliance with children-data obligations

  Schedule (entry 3)

  Penalty up to ₹200 crore.

• Non-compliance with significant data fiduciary duties

  Schedule (entry 4)

  Penalty up to ₹150 crore.

• Breach of other provisions by data fiduciary

  Schedule (entry 6)

  Penalty up to ₹50 crore.

Headline offences only — not exhaustive. For the full text and every section, open the source PDF or the official link below.

Maximum punishments as prescribed by the Act. Actual sentencing depends on facts, prior convictions and judicial discretion.

Sources

Read the Act yourself

We always show you the local source PDF and at least one verifiable online reference, so you can check anything we say.