The government has released a draft of the Digital Personal Data Protection Bill, 2022. According to an explanatory note for the bill, it is based on seven principles pertaining to the data economy. As per the draft bill, the Data Protection Board, a new regulatory body to be set up by the government, can impose a penalty of up to Rs 5 billion if non-compliance by an entity is found to be significant. The bill also proposes six types of penalties for non-compliance. Further, the bill provides for significant concessions on cross-border data flows.