Section Schedule The Schedule
- Chapter
- Schedule · The Schedule
THE SCHEDULE [See section 33(1)]
Sl. No.
Breach of provisions of this Act or rules made thereunder
Penalty
1
Breach in observing the obligation of Data FiduciaryDefined in section 2(i): Data Fiduciary means any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data to take reasonable security safeguards to prevent personal data breachDefined in section 2(u): personal data breach means any unauthorised processing of personal data or accidental disclosure, acquisition, sharing, use, alteration, destruction or loss of access to personal data, that compromises the confidentiality, integrity or availability of personal data under sub-section (5) of section 8.
May extend to two hundred and fifty crore rupees.
2
Breach in observing the obligation to give the BoardDefined in section 2(c): Board means the Data Protection Board of India established by the Central Government under section 18 or affected Data PrincipalDefined in section 2(j): Data Principal means the individual to whom the personal data relates and where such individual is (i) a child, includes the parents or lawful guardian of such a child; (ii) a person with disability, includes her lawful guardian, acting on her behalf notice of a personal data breachDefined in section 2(u): personal data breach means any unauthorised processing of personal data or accidental disclosure, acquisition, sharing, use, alteration, destruction or loss of access to personal data, that compromises the confidentiality, integrity or availability of personal data under sub-section (6) of section 8.
May extend to two hundred crore rupees.
3
May extend to two hundred crore rupees.
4
Breach in observance of additional obligations of Significant Data FiduciaryDefined in section 2(z): Significant Data Fiduciary means any Data Fiduciary or class of Data Fiduciaries as may be notified by the Central Government under section 10 (za) specified purpose means the purpose mentioned in the notice given by the Data Fiduciary to the Data Principal in accordance with the provisions of this Act and the rules... under section 10.
May extend to one hundred and fifty crore rupees.
6
Breach of any term of voluntary undertaking accepted by the BoardDefined in section 2(c): Board means the Data Protection Board of India established by the Central Government under section 18 under section 32.
Up to the extent applicable for the breach in respect of which the proceedings under section 28 were instituted.
7
Breach of any other provision of this Act or the rules made thereunder.
May extend to fifty crore rupees.