Mumbai: Minister of state for electronics and IT Rajeev Chandrasekhar has assured that the government will shortly notify the Data Protection Board (DPB), along with appointment and recruitment rules for its chairperson and members, according to media reports.

The Digital Personal Data Protection (DPDP) Bill 2023, became law earlier this month and the ministry of electronics and IT (MeitY) is working on operationalising it. Modalities for the appeal process at the Telecommunications Disputes Settlement and Appellate Tribunal (TDSAT) are also being formulated, according to the minister.

The DPDP Act has a consent framework under which companies and businesses (data fiduciaries) can process the personal data of any user only with explicit consent. The law permits the government to specify geographies where data cannot be processed, while allowing for its free flow to other jurisdictions.

The Act has also suggested a penalty of up to Rs 250 crore per data breach instance, and a maximum penalty of Rs 500 crore for all such violations, along with mandating stiff norms for the protection of children online. It also has a provision to block platforms that repeatedly fall foul of the law.