6.1 Establishment of the Board
Section 18 DPDPA establishes the Data Protection Board of India as a specialized adjudicatory body. Unlike traditional regulators, the DPB is designed as a digital-first entity focused on efficient dispute resolution rather than broad regulatory oversight.
Section 18: Core Provisions
"With effect from such date as the Central Government may, by notification, appoint, there shall be established, for the purposes of this Act, a Board to be called the Data Protection Board of India."
— Section 18(1), DPDPA 2023Key Characteristics
- Body corporate: The Board is a body corporate with perpetual succession and common seal (S.18(2))
- Legal personality: Can acquire, hold, and dispose of property; can sue and be sued
- Headquarters: Location to be notified by Central Government (S.18(3))
- Establishment date: Effective from date notified by Central Government
Unlike the EU's Data Protection Authorities or the proposed Indian Data Protection Authority in earlier bills, the DPB is primarily an adjudicatory body — it determines complaints and imposes penalties, rather than issuing regulations or conducting proactive inspections. Rule-making power remains with the Central Government.
6.2 Composition & Qualifications
Section 19: Board Composition
"The Board shall consist of a Chairperson and such number of other Members as the Central Government may notify."
— Section 19(1), DPDPA 2023The Act provides flexibility in Board size — the Central Government determines the number of Members based on workload requirements.
Qualification Requirements (Section 19(3))
The Chairperson and Members must be persons of ability, integrity and standing with special knowledge or practical experience in:
Data Governance
Experience in data management, data policy, or data architecture
Administration
Implementation of laws related to social or consumer protection
Dispute Resolution
Experience in adjudication, arbitration, or mediation
ICT & Digital Economy
Information technology, cybersecurity, or digital business
Law & Regulation
Legal practice, regulatory affairs, or techno-regulation
At least one Member must be an expert in the field of law. This ensures legal expertise is always available for interpreting statutory provisions and ensuring procedural compliance.
Appointment Process (Rule 16)
The DPDP Rules 2025 establish Search-cum-Selection Committees for appointments:
| Position | Committee Composition |
|---|---|
| Chairperson | Cabinet Secretary (Chair), Secretary (Legal Affairs), Secretary (MeitY), 2 Expert Members |
| Other Members | Secretary MeitY (Chair), Secretary (Legal Affairs), 2 Expert Members |
6.3 Terms of Office & Conditions
Section 20: Salary & Term
- Term of office: 2 years
- Re-appointment: Eligible for re-appointment
- Salary & allowances: As prescribed (cannot be varied to disadvantage after appointment)
The provision that terms "shall not be varied to their disadvantage after appointment" protects Members from pressure through salary reduction — an important safeguard for judicial independence.
Section 21: Disqualifications
A person is disqualified from appointment and continuation if she:
- (a) Has been adjudged as an insolvent
- (b) Has been convicted of an offence involving moral turpitude (in Central Government's opinion)
- (c) Has become physically or mentally incapable of acting
- (d) Has acquired financial or other interest likely to affect functions prejudicially
- (e) Has so abused position as to render continuance prejudicial to public interest
Important: Removal requires opportunity of being heard (S.21(2)) — a natural justice safeguard.
Section 22: Resignation & Vacancy
- Resignation notice: In writing to Central Government
- Effective date: When permitted by Central Government, OR expiry of 3 months from notice, OR successor enters office, OR term expires — whichever is earliest
- Cooling-off period: 1 year bar on employment with Data Fiduciaries against whom proceedings were initiated
- Disclosure: Must disclose subsequent employment with such Data Fiduciaries
6.4 Organizational Structure
Chairperson
General Superintendence & Direction
Members
Adjudicatory Functions
Officers
Administrative Support
Employees
Operational Staff
Section 26: Powers of Chairperson
- General superintendence: Direction in all administrative matters
- Scrutiny authorization: Authorize officers to scrutinize intimations, complaints, references, correspondence
- Function allocation: Authorize individual Members or groups to perform Board functions and allocate proceedings among them
Section 24: Officers & Employees
The Board may, with prior approval of Central Government, appoint officers and employees necessary for efficient discharge of functions.
Section 25: Public Servant Status
The Chairperson, Members, officers, and employees are deemed public servants under Section 21 IPC (now Section 2(25) BNS) when acting under DPDPA. This provides protection under anti-corruption laws and subjects them to official accountability.
6.5 Digital-First Design
A distinctive feature of the DPB is its mandate to function as a digital office:
"The Board shall function as an independent body and shall, as far as practicable, function as a digital office, with the receipt of complaints and the allocation, hearing and pronouncement of decisions in respect of the same being digital by design..."
— Section 28(1), DPDPA 2023Digital Operations
- Digital complaint filing: Online submission of complaints and intimations
- Digital allocation: Automated case assignment systems
- Digital hearings: Video conferencing and electronic evidence
- Digital pronouncement: Electronic delivery of decisions
Rule 18: Meetings & Authentication
- Meeting procedure: Including by digital means (Rule 18(1))
- Quorum: One-third of membership (Rule 18(3))
- Decisions: By majority vote; Chairperson has casting vote (Rule 18(4))
- Circulation: Items may be decided by circulation if Chairperson directs (Rule 18(7))
- Inquiry timeline: Completed within 6 months, extendable by 3 months at a time (Rule 18(9))
Practitioners should prepare for digital proceedings — ensure proper video conferencing setup, understand electronic evidence submission requirements, and maintain digital records of all communications with the Board.
6.6 Comparison with Other Bodies
| Aspect | DPB (India) | ICO (UK) | CNIL (France) |
|---|---|---|---|
| Primary Role | Adjudication | Regulation + Enforcement | Regulation + Enforcement |
| Rule-Making | None (Central Govt) | Guidance, Codes | Guidelines, Recommendations |
| Proactive Inspections | Limited | Yes | Yes |
| Independence | Functional | Statutory | Constitutional |
| Appointment | Executive | Parliamentary | Mixed |
The DPB's adjudicatory focus reflects a deliberate choice to separate rule-making (retained by Central Government) from enforcement (DPB's domain). This differs from the "omnibus regulator" model common in Europe but may allow faster, more focused dispute resolution.
🎯 Key Takeaways
- Body corporate with perpetual succession — established under Section 18
- Flexible composition — Chairperson + Members as notified; at least one law expert
- 2-year term with re-appointment eligibility — security of tenure protected
- Digital-first design — complaints, hearings, decisions all digital by design
- Adjudicatory focus — determines complaints and imposes penalties; no rule-making
- Public servant status — Members and staff deemed public servants under BNS