Updated: 19 September 2026
DPDPA Enforcement Tracker India
The most comprehensive public database of Indian data privacy enforcement actions — covering DPDPA 2023, sectoral regulators, CERT-In directions, court rulings, and GDPR actions affecting Indian companies.
6Total cases tracked
3DPDPA Board actions
1Global benchmarks
3
DPDPA & DPB
Board & rule milestones
1
Sectoral Regulators
RBI · SEBI · IRDAI · CCI
1
CERT-In & Breaches
6-hour reporting mandate
0
Courts & Case Law
SC · HCs · TDSAT · 43A
1
Global Benchmarks
GDPR / DPA — India-relevant
Enforcement by Sector
1
Social Media / Tech
0
Insurance / Healthcare
0
Payments / Fintech
1
Government
3
Other Sectors
Filter:
DPDPA 2023
DPDPA & Data Protection Board
(3)Statute, rules and Data Protection Board milestones — MeitY, PIB, the eGazette, India Code and PRS.
| Date | Authority | Company / Entity & Summary | Violation | Penalty | Outcome | Source |
|---|---|---|---|---|---|---|
| 4 days ago | Cyril Amarchand blog | abcdef AUTO-DETECTED via SERPER from Cyril Amarchand blog: Whole Genome Sequencing in Healthcare - India Corporate Law. genetic counselling, and long-term data protection. data-specific safeguards for genomic information may be the need of the hour in the larger public interest. | Link ↗ | |||
| 2025-01-03 | MeitY | Government of India MeitY released the draft Digital Personal Data Protection Rules 2025 for public consultation. | Rule-making | N/A | Rule drafted | Link ↗ |
| 2 days ago | Cyril Amarchand blog | abcd AUTO-DETECTED via SERPER from Cyril Amarchand blog: Mirror, Mirror on the Wall: The Rise of Personalised Cosmetics .... This post examines the key legal considerations that arise when AI is used to design customised cosmetic regimens. Data Center Data Protection Digital Dispute | Link ↗ |
Regulators
Sectoral Regulator Actions
(1)Penalties and orders from RBI, SEBI, IRDAI, CCI, TRAI, DoT, UIDAI, NPCI and the CCPA.
| Date | Authority | Company / Entity & Summary | Violation | Penalty | Outcome | Source |
|---|---|---|---|---|---|---|
| 2024-07-19 | CCI | WhatsApp / Meta CCI imposed a penalty on Meta over the 2021 WhatsApp privacy policy and its data-sharing terms. | Abuse of dominance (data sharing) | Rs 213.14 crore | Fine imposed | Link ↗ |
CERT-In
CERT-In & Breach Enforcement
(1)CERT-In directions (IT Act Section 70B, 6-hour mandate) plus reported Indian data breaches.
| Date | Authority | Company / Entity & Summary | Violation | Penalty | Outcome | Source |
|---|---|---|---|---|---|---|
| 3 hours ag | TechCrunch | abcd AUTO-DETECTED via SERPER from TechCrunch: Exclusive | Page 52 of 58 - TechCrunch. Security Fertility tracker Glow fixes bug that exposed users' personal data Lorenzo. India stumped on how to cut PhonePe and Google dominance in payments … ... | Link ↗ |
Courts
Courts & Case Law
(0)Judgments and tribunal rulings — Supreme Court, High Courts, TDSAT and IT Act Section 43A adjudications.
| Date | Authority | Company / Entity & Summary | Violation | Penalty | Outcome | Source |
|---|---|---|---|---|---|---|
| No verified entries yet — new leads are pending review. | ||||||
Global
International Benchmarks (India-Relevant)
(1)Major GDPR and global DPA enforcement actions relevant to Indian companies — benchmarks for DPDPA.
| Date | Authority | Company / Entity & Summary | Violation | Penalty | Outcome | Source |
|---|---|---|---|---|---|---|
| 2023-05-22 | DPC Ireland | Meta Platforms The Irish DPC fined Meta EUR 1.2 billion over unlawful EU-US transfers. Benchmark for Indian IT/ITES firms. | Unlawful EU-US data transfers (Art. 46) | EUR 1.2 billion | Fine imposed | Link ↗ |
All data sourced from official regulatory notices, court orders, and verified news reports. Penalty amounts confirmed where official orders exist; unconfirmed details noted inline. This tracker is provided for informational purposes only — not legal advice. CC BY 4.0 · Open dataset (JSON)