India: Digital Personal Data Protection (Amendment) Bill, 2025 (No. 38 of 2025), including data protection authority governance was introduced to Council of States

On 5 December 2025, the Digital Personal Data Protection (Amendment) Bill, 2025 (No. 38 of 2025), including data protection authority governance, was introduced to the Council of States of the Parliament of India. The Bill seeks to address gaps in the Digital Personal Data Protection Act, 2023, including strengthening privacy, ensuring independence of the Data Protection Board, and enhancing provisions on consent, security standards, and children’s data protection. The amendments apply to both private and public entities handling personal data, including data fiduciaries and data processors. The Bill proposes amendments to the Digital Personal Data Protection Act, strengthening the powers of the Data Protection Board. The amendments empower the Board to adjudicate violations and award compensation proportionate to the harm caused. The Board’s Chairperson and Members will be appointed by a Selection Committee comprising judicial, executive, and opposition representatives, along with an independent data protection expert. In the Bill, the Board is expressly designated as an independent statutory authority and is not subject to Central Government directions.