ICN — Integrated Cyber Nexus CYBER CIBIL

Sector explorer

Your sector, through a DPDP lens

Every tab below shows typical personal-data flows, an illustrative failure scenario, the potentially relevant DPDP duty, its statutory maximum penalty category, and a matching draft service add-on. Examples are illustrative — the Act does not set sector-specific duties or penalty rates.

Last verified 25 September 2026 Duties & penalties commence 13 May 2027
Read the labels: scenarios above are illustrative, the amounts shown are statutory maximums for violation categories (never sector rates or predictions), and the Data Protection Board determines any penalty only after an inquiry. See how penalties actually work.

Next step

Recognise your sector in the scenarios?

That recognition is the beginning of a gap register. A readiness call turns it into named gaps, owners and deadlines.

Book a Readiness Call Run the self-assessment