What Is the Data Protection Board of India (DPBI)? Powers, Penalties, and How to Be Ready for It
The Data Protection Board of India is the body that will actually fine you under the DPDP Act — up to ₹250 crore per instance. Yet most Indian businesses can’t say what it is, how it works, or what it will ask for. A plain-language explainer on the DPBI.
Established under Section 18 of the DPDPA 2023, the Data Protection Board of India (DPBI) operates as a "digital by design" adjudicatory body. It has the authority to direct urgent remediation measures following a personal data breach, inquire into Data Principal complaints, and impose financial penalties up to ₹250 crore for failure to maintain reasonable security safeguards or up to ₹200 crore for failure to give breach notices or protect children’s data.
The single best defence in any DPBI inquiry is an immutable, timestamped consent audit log paired with a structured Breach Management register — both included in every ConsentLedger subscription.
Need help implementing this under the DPDP Act 2023?
Talk to our legal advisors at Manoj Bhagat & Associates or estimate your annual compliance cost in 30 seconds.