The President of India gave assent to the Digital Personal Data Protection Amendment Act, 2025, which operationalises the enforcement provisions of the parent Digital Personal Data Protection Act, 2023. The amendment establishes the Data Protection Board of India as a statutory body with adjudicatory powers to hear complaints and impose penalties for data breaches.

The Act strengthens the grievance redressal mechanism by mandating Data Fiduciaries to appoint a Consent Manager and provide a clear process for data principals to withdraw consent. Penalties for violations can range up to ₹250 crore. The Board will function as a digital-first body, conducting proceedings electronically. India's data protection framework now covers over 800 million internet users.