Penalties

• Unauthorized Processing of Personal Information.

  Term: 1 to 3 years

  Fine: 500,000 to 2,000,000
• Unauthorized Processing of Sensitive Personal Information.

  Term: 3 to 6 years

  Fine: 500,000 to 4,000,000
• Accessing Personal Information Due to Negligence.

  Term: 1 to 3 years

  Fine: 500,000 to 2,000,000
• Accessing Sensitive Personal Information Due to Negligence.

  Term: 3 to 6 years

  Fine: 500,000 to 4,000,000
• Unauthorized Access or Intentional Breach.

  Term: 1 to 3 years

  Fine: 500,000 to 2,000,000
• Improper Disposal of Personal Information.

  Term: 6 months to 2 years

  Fine: 100,000 to 500,000
• Improper Disposal of Sensitive Personal Information.

  Term: 1 to 3 years

  Fine: 100,000 to 1,000,000
• Processing of Sensitive Personal Information for Unauthorized Purposes.

  Term: 2 to 7 years

  Fine: 500,000 to 2,000,000
• Processing of Personal Information for Unauthorized Purposes.

  Term: 1 years and 6 months to 5 years

  Fine: 500,000 to 1,000,000
• Malicious Disclosure

  Term: 1 years and 6 months to 5 years

  Fine 500,000 to 1,000,000
• Combination or Series of Acts.

  Term: 3 to 6 years

  Fine: 1,000,000 to 5,000,000
• Concealment of Security Breaches Involving Sensitive Personal Information.

  Term: 1 year and 6 months to 5 years

  Fine: 500,000 to 1,000,000
• Unauthorized Disclosure Personal Information.

  Term: 1 to 3 years

  Fine 500,000 to 1,000,000
• Unauthorized Disclosure Sensitive Personal Information

  Term: 3 to 5 years

  Fine: 500,000 to 2,000,000