Laying the Groundwork: India's Path to Data Protection

The Indian government is establishing the Data Protection Board to enforce the new Digital Personal Data Protection Act. The Act defines data handling practices, outlines roles and penalties, and emphasizes the importance of safeguarding digital personal data. The board will operate fully online to streamline its functions and ensure compliance.

The Indian government is making progress in forming the new Data Protection Board, designed to enforce the recently enacted Digital Personal Data Protection (DPDP) Act, according to IT Secretary S Krishnan.

The DPDP Act aims to guard digital personal data by defining proper handling procedures and responsibilities for Data Fiduciaries, while outlining the rights of Data Principals. It imposes penalties for breaches, prioritizing both individual rights and data processing for lawful purposes.

The government is also finalizing the software necessary for a completely online office for the Board, which is expected to be operational "in the coming months." Consultation with industry stakeholders is ongoing to assess the timeline for compliance.

(With inputs from agencies.)