Govt to add fines for firms violating deals with privacy board

The proposed data protection law in India may include penal provisions for entities that violate voluntary undertakings related to privacy breaches. The law aims to encourage companies to proactively report breaches and take remedial measures to avoid hefty fines. The law will establish a Data Protection Board as the regulator, with the power to monitor incidents and impose penalties. Breaching voluntary undertakings may also result in fines. The law has faced criticism for its provisions and lack of independence for the regulator.