| Schedule Item | Violation | Max Penalty |
|---|
| Schedule Item 1 | Breach of obligation to take reasonable security safeguards to prevent personal data breach (Section 8(5)) | ₹250 Crore |
| Schedule Item 2 | Breach of obligation to give Board and affected Data Principals notice of a personal data breach (Section 8(6)) | ₹200 Crore |
| Schedule Item 3 | Breach of obligations in respect of children (Section 9) | ₹200 Crore |
| Schedule Item 4 | Breach of additional obligations applicable to Significant Data Fiduciary (Section 10) | ₹150 Crore |
| Schedule Item 5 | Breach of obligation to furnish information, comply with direction, or implement security safeguards (Section 8) | ₹10,000 |
| Schedule Item 6 | Breach of obligation to give notice or obtain consent (Sections 5 and 6) | ₹200 Crore |
| Schedule Item 7 | Breach of any other provision of the Act or Rules | ₹50 Crore |