Read as
Last updated: April 29, 2026
Why this module exists. The Data Protection Board has inspection powers under §28. When the DPB shows up — physically or via written information request — you have days, not months, to produce evidence. Most Indian businesses can’t currently. This module is the readiness checklist.
Why this module exists. The Data Protection Board has inspection powers under §28. When the DPB shows up — physically or via written information request — you have days, not months, to produce evidence. Most Indian businesses can’t currently. This module is the readiness checklist.
What the DPB can ask for
Under §28 + civil-court powers per §27(2):
- Records, registers, books
- Documents and electronic records
- Information from any officer or employee
- Examine on oath
- Inspect premises
Practically, expect a written request with a 7-30 day response window for typical questions; immediate access for inspections.
Want this for your team?
Custom team training + practitioner advisory
Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.
Book team training call
Replies in 4 working hrs · India-only · Senior consultants