India: Adopted Digital Personal Data Protection Act including data protection authority governance

On 9 August 2023, the Digital Personal Data Protection Act was adopted by the Rajya Sabha (Parliament’s upper house). The Act will allow the Government to establish a Data Protection Board of India. The Board is empowered to act in case of personal data breach notifications, breaches of consent for the treatment of personal data by consent managers or intermediaries, as well as handle complaints by data principals. The Board may direct urgent remedial or mitigation measures in case of a personal data breach. Furthermore, the Board is empowered to impose penalties on entities found responsible for data breaches. Finally, the Bill outlines the Board's procedures.