Browsing: Penalties

India has notified the Digital Personal Data Protection Rules, 2025, bringing into force the enforcement and penalty framework under the Digital Personal Data Protection Act, 2023. The Rules empower the Data Protection Board of India to examine violations of the Act and impose financial penalties on entities that fail to comply with legal obligations related to personal data protection. Serious violations — including failure to implement required security safeguards, failure to report data breaches, or violation of core compliance requirements — can attract penalties of up to ₹250 crore. Other categories of non-compliance, such as procedural failures related to consent,…