Free · Live tracker
Data Protection Board of India — fines & orders
Every monetary penalty and enforcement order the Data Protection Board of India issues under the DPDP Act 2023, with the company, sector, section violated and a link to the order. Editorially curated — no fabricated entries — so you can rely on it for research, journalism or building a case.
Tracker live · 0 orders so far
Watching for the first DPB enforcement order
The Data Protection Board of India is being constituted under Chapter V of the DPDP Act. As soon as the first order is published, it will appear here — with the company, the section violated, the penalty amount and a link to the order itself. We do not seed the tracker with hypothetical fines.
What the law allows
Schedule 1 penalty bands
The DPDP Act 2023 caps penalties per default. The Board sets the actual amount under Section 33(2) — taking into account the nature of the breach, the size of the Data Fiduciary and any cooperation or self-reporting.
Up to ₹250 crore
Failure to take security safeguards under Section 8.
Up to ₹200 crore
Failure to notify a breach to the Board and affected Data Principals (Section 8(6)).
Up to ₹150 crore
Failure to fulfil obligations on processing children’s data (Section 9).
Up to ₹150 crore
Failure of a Significant Data Fiduciary to meet its enhanced obligations (Section 10).
Up to ₹50 crore
Breach of any other provision of the Act or the Rules — the catch-all.
What to do with this