Skip to main content
High-risk AI system classification guidance published - check your tier

Compliance Penalty Calculator

Estimate your maximum penalty exposure under GDPR, CCPA/CPRA, DPDPA, UK GDPR, and LGPD. For executive conversations and budget approvals.

Your inputs

11 violation10+

These figures are statutory maximums. Actual enforcement varies - regulators consider intent, cooperation, prior history, and mitigation.

Estimated maximum exposure
₹250 crore

Statutory maximum under India DPDPA across 1 violation

Per-violation cap₹250 crore

Penalty breakdown for India DPDPA

  • ₹250 crore - failure of reasonable security safeguards (Sec. 8(5))
  • ₹200 crore - failure to notify a personal data breach (Sec. 8(6))
  • ₹200 crore - breach of children's data obligations (Sec. 9)
  • ₹150 crore - Significant Data Fiduciary duties (Sec. 10)
  • ₹50 crore - breach of any other provision

A full compliance programme typically costs 1–3% of the maximum penalty exposure - and avoids the rest.

Run compliance assessmentOur India DPDPA programme →
Disclaimer: This calculator illustrates statutory penalty ceilings only. It is not legal advice, and actual fines depend on regulator discretion, mitigating factors, and case-specific facts. Currencies are not exchange-converted - figures reflect each regulator's native unit.

Frequently Asked Questions

What does this calculator show?+

It illustrates the statutory maximum penalty under the regime you select, based on the revenue, violation and record figures you enter. It is an illustration of the legal ceiling, not a prediction of any outcome.

Which regimes are covered?+

GDPR, UK GDPR, CCPA/CPRA, India's DPDPA and Brazil's LGPD. Each uses its own basis — turnover percentages, fixed caps or per-record amounts — which is why the same inputs produce very different figures.

Why is the result so much higher than fines I've read about?+

Because statutory maximums are ceilings, not typical outcomes. Actual enforcement depends on the nature and gravity of the infringement, mitigation, cooperation, prior history and the regulator's own methodology.

Why does the CCPA figure depend on record counts?+

CCPA/CPRA exposure is assessed per affected record, with a higher amount where a violation is intentional, rather than as a percentage of turnover. That is why the calculator asks for affected records separately.

Can I use this for budgeting or board reporting?+

Use it to frame the scale of exposure, not as a forecast. The breakdown notes that a full compliance programme typically costs a small fraction of the statutory maximum, which is the more useful comparison for planning.

Is this legal advice?+

No. As the disclaimer on this page states, the calculator illustrates statutory maximums for orientation. For an assessment of your actual exposure, obtain advice from appropriately qualified counsel.