Indian officials have begun drafting secondary regulations for the Digital Personal Data Protection Act while also establishing the Data Protection Board, Inc42 reports. Clarifying rules on data breach reporting and business obligations are being crafted at the same time the government is mulling DPB appointments and recruiting guidelines. Meanwhile, Business Insider India reports startup businesses are not likely to be exempt from the DPDPA and may seek a two-year implementation period.