India: Passed India Digital Personal Data Protection Act including data protection authority governance

On 7 August 2023, the Digital Personal Data Protection Act was passed by the Lok Sabha (Parliament’s lower house). The Act would allow the Government to establish a Data Protection Board of India. The Board is empowered to act in case of personal data breach notifications, breaches of consent for the treatment of personal data by consent managers or intermediaries, as well as handle complaints by data principals. The Board may direct urgent remedial or mitigation measures in case of a personal data breach. Furthermore, the Board is empowered to impose penalties on entities found responsible for data breaches. Finally, the Act outlines the Board's procedures.