The statutory authority under the Digital Personal Data Protection Act, 2023 charged with monitoring compliance and imposing penalties is the:

The DPDP Act, 2023 establishes the DATA PROTECTION BOARD OF INDIA (Section 27) as the adjudicating authority to inquire into complaints of contravention, monitor compliance, and impose the penalties the Act prescribes. It reflects the decision that a DATA-protection authority should be replaced by a Board with investigatory-adjudicatory roles (the Act omits the erstwhile 'Authority' framework). The CCI deals with competition, TRAI with telecom, and the Cyber Appellate Tribunal with information-technology appeals. The Board is thus the new enforcer of India's data-protection regime.