Up to nine questions about how you collect, keep and protect the contacts you message. Each gap is matched to the section of the Act it breaks and the most the Data Protection Board can fine for it, with the fix for each.
Each is a Data Principal under the Act. The Board weighs how many people a breach touches.
The Schedule sets a cap per kind of breach, up to ₹250 crore for failing to protect personal data. The Board decides the actual amount after an inquiry, weighing things like how serious and how long the breach was, what data was involved, whether it repeated, and what you did to limit the harm.
No. It maps common practices to the Act so you can see where to look. For a decision about your business, ask a lawyer who practises data protection law.
The Act gives both their own heads in the Schedule: up to ₹200 crore for breaking the duties about children, and up to ₹150 crore for breaking the extra duties of a Significant Data Fiduciary.
No. The calculator runs in your browser and nothing you tick is sent anywhere. Only if you ask us to send you the result do we keep your name, number and that result, to send it.
Figures are the statutory maximums in the Schedule to the Digital Personal Data Protection Act, 2023, and an illustration of ours; they are not a prediction of any penalty. The Rules and the Board's practice may change how the Act applies to you.
