Skip to content
DPDP
Free · in browser·4 min · no account

What a breach could actually cost you

The Act allows penalties up to ₹250 crore for failing to take reasonable security safeguards. The Board sets the actual amount by nature, gravity, duration and repetitiveness. This estimator shows where your profile lands in that range — and which control cuts it fastest.

Start nowAll free tools
Time needed
4 minTime needed
Signup steps
0Signup steps
Maps to
Penalty scheduleMaps to

The tool

How many data principals do you hold?
What is the most sensitive category you hold?
Which safeguards are actually in place?

Tick only what you could evidence to an auditor today.

In placeSafeguardReduces by
Encryption at rest and in transit22%
Role-based access with periodic review14%
Logging and monitoring on personal data stores12%
Retention windows enforced and evidenced10%
Rehearsed breach playbook with blast-radius capability16%

Indicative exposure band

Pick a data volume and a sensitivity category to see a band.

Indicative only. The Data Protection Board sets penalties case by case on nature, gravity, duration and repetitiveness. Not legal advice.

Reduce this exposure
3 questions

Common questions

How Breach Cost Estimator works, what it can and cannot see, and what happens to anything you enter.

No, and be suspicious of anything that claims to be. The Data Protection Board decides penalties case by case. This is a planning aid, not a forecast.

Other free tools

30 minutes·one real data flow

Ready to Simplify DPDP Compliance?

Most vendors open a deck. We open the product, map one of your real data flows, and tell you honestly how far you are from compliant.

Book a DemoContact Sales
  • No slides
  • No obligation
  • Data stays in India

What the 30 minutes looks like

  1. 0–5Your stack, in your wordsWhere data lands today, and who already owns it.
  2. 5–15One real flow, mapped liveWe connect a sample source and build the map on the call.
  3. 15–25Where you are exposedThe gaps we can see, ranked — including the ones you already knew.
  4. 25–30Effort and costWhat closing them takes, and whether we are the right answer.

If we are not the right fit, we will say so on the call rather than three follow-ups later.