The Data Protection Board of India, slated to operate as an independent body and function as a "digital office," will be empowered to adjudicate on deciding the quantum of any such penalties. If any organisation handling personal data of users fails to "take reasonable security safeguards to prevent personal data breach", a penalty of up to ₹200 crore may be levied, according to the draft Bill.
