THE DATA PROTECTION BOARD
The Draft Rules provide for further clarifications regarding the
Data Protection Board, the new adjudicating authority established
under the Act to govern all matters pertaining to its operations.
On top of its primary responsibility of receiving and deciding upon
complaints related to data privacy, it is also entrusted with the
task of registering and regulating Consent Managers, overseeing
data breaches by Data Fiduciaries, and monitoring DPIAs and audits
of Significant Data Fiduciaries.
The Draft Rules offer additional insight into the Board's
operation a digital office with the authority to summon and enforce
attendance remotely. This furthers the "digital by
design" nature of the Act and positively promotes ease of
access for Data Principals and business convenience for Data
Fiduciaries. Any entity aggrieved by a decision of the Board can
appeal against such order or direction to the Telecom Disputes
Settlement and Appellate Tribunal.
