The government has been in the process of setting up the Data Protection Board of India (DPB), a regulatory authority established by the Act. In late 2023, the IT Ministry indicated the DPB would be formed “within 30 days” after consultations. However, as of the latest updates, the Board’s full constitution (appointment of chairperson and members) had not been publicly announced. The DPB’s infrastructure (digital portal for complaints, etc.) is presumably under development. Once operational, the DPB will start registering complaints and can take enforcement actions. The government has assured that the Board will be a modern, efficient regulator – likely starting with an online system that may become active as soon as the Act is notified. Enterprises should be prepared for regulatory engagement with the DPB in terms of reporting and responding to notices digitally.