The revised Personal Data Protection Bill, expected to be tabled in the current monsoon session of Parliament, is a significant move towards India’s first dedicated personal data protection legislation. One of the proposals is a data protection authority, a cross-sectoral regulator that will significantly influence the Indian regulatory landscape. Against the backdrop of these developments, the author seeks to draw out the appropriate regulatory design keeping in mind essential questions of India’s existing regulatory capacity, framework, and jurisprudence.