The new data protection Bill being framed by the Centre will have heavy penalties for personal data breach. A penalty of up to Rs 250 crore can be imposed if the 'data processor' or 'data fiduciary' fails to take reasonable security safeguards to prevent personal data breach, government sources said.