Section 28 — DPDP Act, 2023
(1) The Board shall adopt a digital-by-default approach to its proceedings. (2) In conducting an inquiry, the Board shall— (a) give reasonable opportunity of being heard to the Data Fiduciary; (b) consider the response of the Data Fiduciary; (c) follow such procedure as may be prescribed. (3) The Board shall endeavour to dispose of a matter within the prescribed period from the date of filing.
Source: Digital Personal Data Protection Act, 2023. Official text available at truconsent.io/resources/dpdp-act.pdf.
Section 28 establishes the Board's digital-first operating model. Proceedings are conducted online — there is no requirement to appear in person unless the Board specifically requires it. The Data Fiduciary has a right to be heard and to submit a response before any penalty is imposed. The Board must attempt to resolve matters within a prescribed period (set by Rule 19 at six months with extension justification required).