Section 27Powers, Functions and Procedure of the BoardStructural summary
Powers and functions of Board
Statutory summary
On receipt of an intimation of a personal data breach, or a complaint, or a reference from the Central Government, the Board may inquire into the matter and, if satisfied a breach has occurred, direct remedial or mitigating measures, impose penalties, and direct any urgent measures necessary to remedy a personal data breach or prevent further harm.
Plain-language explanation
- The Board acts on three triggers: a Fiduciary's own breach intimation, an individual's complaint, or a government reference — it does not proactively audit organisations at will the way some regulators do.
Reconstructed for readability from the publicly notified DPDP Act, 2023. Always verify exact wording against the official Gazette of India before relying on this for legal or compliance decisions.