As per section 27, following are the powers and functions of the Board:
a. To direct any urgent remedial or mitigation measures in the event of a personal data breach, and to inquire into such personal data breach and impose penalty as provided in this Act
b. To inquire into such breach and impose penalty as provided in this Act against the Data Fiduciary, Consent Manager, Intermediary (under section 37)
c. To inquire into such breach and impose penalty as provided in this Act on receipt of an intimation of breach of any condition of registration of a Consent Manager
d. Issue such directions to person who shall be bound to comply with the same.
e. Modify, suspend, withdraw or cancel such direction and, while doing so, impose such conditions as it may deem fit, subject to which the modification, suspension, withdrawal or cancellation shall have effect
Additionally, the Board is provided with the same powers as are vested in a Civil Court under the Code of Civil Procedure. 1908, to discharge its functions in respect of following matters:
a. Summoning and enforcing the attendance
b. Examination on oath
c. Discovery and production of documents
d. Inspection of documents
e. Receiving evidence of affidavit
f. Any other matter
