Data protection Bill revised: Penalty up to Rs 200 crore if firms don’t have safeguards

Companies dealing in personal data of consumers that fail to take reasonable safeguards to prevent data breaches could end up facing penalties as high as around Rs 200 crore under the revamped version of the Data Protection Bill, The Indian Express has learnt. The Data Protection Board, an adjudicating body proposed to enforce the provisions of the Bill, is likely to be empowered to impose the fine after giving the companies an opportunity of being heard.

Penalties are expected to vary on the basis of the nature of non-compliance by data fiduciaries — entities that handle and process personal data of individuals. Companies failing to notify people impacted by a data breach could be fined around Rs 150 crore,