Pick what went wrong, add the circumstances the Data Protection Board has to weigh, and see both the statutory maximum and a realistic indicative range. Everything runs in your browser — we don't see or store anything you enter.
These are the caps written into the Schedule to the DPDP Act 2023. They are ceilings, not fines — the Board decides the actual figure.
| Failure | Maximum |
|---|---|
| Not taking reasonable security safeguards to prevent a personal data breach | ₹250 crore |
| Failing to notify the Board and affected individuals of a breach | ₹200 crore |
| Breaching obligations relating to children's data | ₹200 crore |
| A Significant Data Fiduciary failing its additional obligations | ₹150 crore |
| Breaching any other provision of the Act or its rules | ₹50 crore |
| A data principal breaching their own duties | ₹10,000 |
Because maximums are reserved for the worst cases. Section 33(2) requires the Board to weigh the gravity and duration of the breach, the type of data involved, whether it was repeated, whether you gained from it, and how quickly and effectively you mitigated — then impose something proportionate. A small business that responded well sits nowhere near the ceiling.
Yes, and this is the part businesses underestimate. One bad week can be three instances: a breach caused by weak safeguards, then a failure to notify, and children's data in the leaked set. Select all that apply above — we explain the stacking here.
The obligations do. Almost every business handling personal data of people in India is a data fiduciary, MSMEs included. In practice the nearer-term costs for smaller firms are contractual and reputational — enterprise customers now write DPDP clauses into vendor agreements — but the statutory exposure is real.
No. The calculator is plain JavaScript running in your browser. Nothing is submitted, logged or sent anywhere.
This calculator is general information and an educational estimate — not legal advice, and not a prediction of any Data Protection Board decision. Figures reflect the Schedule to the DPDP Act, 2023 and the DPDP Rules notified in November 2025. For a formal assessment of your exposure, consult a qualified professional or talk to Ronin Works.