India: Entry into force with grace period of India Digital Personal Data Protection Act 2023 including data protection authority governance

On 11 August 2023, the Digital Personal Data Protection Act 2023 entered into force after receiving Presidential assent. The Act will allow the Government to establish a Data Protection Board of India. The Board is empowered to act in case of personal data breach notifications, breaches of consent for the treatment of personal data by consent managers or intermediaries, as well as handle complaints by data principals. The Board may direct urgent remedial or mitigation measures in case of a personal data breach. Furthermore, the Board is empowered to impose penalties on entities found responsible for data breaches. Finally, the Act outlines the Board's procedures.