You need to add @Valid annotation to DTO class in the controller and apply validation annotations to DTO class fields (Java record class or regular class).