The Hindustan Times reports India's government may add "penal provisions" for violating agreements with the Data Protection Board under the proposed Digital Personal Data Protection Bill. "The voluntary undertaking may include an undertaking to take specified action (such as reporting a data breach) within a specified time, an undertaking to refrain from taking specified action, and an undertaking to publicizing the voluntary undertaking, the new draft states," an official said. A previous version of the bill did not include fines if a voluntary undertaking was violated.