India: Passed India Digital Personal Data Protection Bill 2023 including data protection authority governance

On 7 August 2023, the Digital Personal Data Protection Bill 2023 was passed by the Lok Sabha (Parliament’s lower house). The Bill would allow the Government to establish a Data Protection Board of India. The Board is empowered to act in case of personal data breach notifications, breaches of consent for the treatment of personal data by consent managers or intermediaries, as well as handle complaints by data principals. The Board may direct urgent remedial or mitigation measures in case of a personal data breach. Furthermore, the Board is empowered to impose penalties on entities found responsible for data breaches. Finally, the Bill outlines the Board's procedures. The Bill will now be discussed in the Parliament’s upper house (Rajya Sabha).