← Leyes de protección de datos y delitos informáticos por país
India: ley de protección de datos, delitos informáticos, multas y penas
DPDP Rules notified on 14 Nov 2025, phased in over 18 months (around May 2027), with fines up to ₹250 crore.
- Law
- DPDP Act 2023 + DPDP Rules 2025
- Authority
- Data Protection Board of India (appeals to TDSAT)
- Max fine
- Up to ₹250 crore (security safeguards); ₹200 crore (unreported breach or children); ₹50 crore (other)
- Breach notification
- Data principals: "without delay"
- DPO
- —
Crimes
| Hacking with fraud or dishonest intent | IT Act 2000, s.66 | Up to 3 years |
| Identity theft | IT Act 2000, s.66C | Up to 3 years |
| Cheating by personation (phishing) | IT Act 2000, s.66D | Up to 3 years |
| Cyberterrorism | IT Act 2000, s.66F | Up to life imprisonment |
| Cheating | Bharatiya Nyaya Sanhita 2023, s.318 | Up to 7 years |
Risks
- End of the DPDP transition around May 2027
- Consent-manager obligations (registration in about 12 months)
- Security-safeguard failures: highest fine tier (₹250 crore)
- Fully digital Data Protection Board with 4 members
Fuente: PIB – Governo da Índia (PDF) · Deccan Herald · BDO India · India Code – IT Act