Aspireitacademy at 09:42, 14 January 2026

2026-01-14T09:42:58Z

New page

{{Short description|Data protection authority in India}}
{{Infobox government agency
| name = Data Protection Board of India
| type = Adjudicatory Board
| formed = {{Start date|2025|11|13|df=yes}}
| jurisdiction = [[India]]
| headquarters = National Capital Region of India
| chief1_name = Mr.Ghosal Pankaraj IMS
| chief1_position = Chairperson
| parent_department = Ministry of Electronics and Information Technology
}}
The '''Data Protection Board of India''' ('''DPBI''') is an adjudicating body established under section 18<ref name=":1">{{Cite web |title=Digital Personal Data Protection Act, 2023 |url=https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf |access-date=16 May 2025}}</ref> of the [[Digital Personal Data Protection Act, 2023]]. It is a body that adjudicates the dispute between those whose personal data has been given to a platform and the platform which has in turn breached the obligations under the Digital Personal Data Protection Act, 2023.<ref>{{Cite web |last=Ganguly |first=Shirsha |date=2023-08-30 |title=Data Protection Board To Function As Adjudicator, Not Regulator, Clarifies MoS IT |url=https://thelogicalindian.com/technology/data-protection-board-clarified-as-adjudicator-not-regulator-by-mos-it-41098 |access-date=2023-09-06 |website=thelogicalindian.com |language=en}}</ref>

== Background ==
The events that lead to the establishment of the Data Protection Board of India are as follows:
* On 18 November 2022, the [[Ministry of Electronics and Information Technology]] released the Digital Personal Data Protection Bill, 2022 for public consultation.<ref name=":6">{{Cite web |title=Data Protection Framework {{!}} Ministry of Electronics and Information Technology, Government of India |url=https://www.meity.gov.in/data-protection-framework |access-date=2023-08-28 |website=www.meity.gov.in}}</ref><ref name=":0">{{Cite web |title= |url=http://sci.gov.in/pdf/LU/ALL%20WP(C)%20No.494%20of%202012%20Right%20to%20Privacy.pdf |archive-url=https://web.archive.org/web/20170828075957/http://sci.gov.in/pdf/LU/ALL%20WP(C)%20No.494%20of%202012%20Right%20to%20Privacy.pdf |archive-date=2017-08-28 |access-date=2023-08-09}}</ref>
* On 5 July 2023, the cabinet approved the Digital Personal Data Protection Bill, 2023 which is the revised version of the bill which was put up for public consultation earlier.<ref name=":8">{{Cite news |date=2023-07-05 |title=Cabinet clears Data Protection Bill |language=en-IN |work=The Hindu |url=https://www.thehindu.com/news/national/cabinet-clears-data-protection-bill/article67046012.ece |access-date=2023-08-28 |issn=0971-751X}}</ref>
* On 3 August 2023, the Digital Personal Data Protection Bill, 2023 was introduced in [[Lok Sabha]], the lower house of the [[Parliament of India]].<ref name=":5">{{Cite news |date=2023-08-03 |title=Digital Personal Data Protection Bill, 2023 introduced in Lok Sabha |language=en-IN |work=The Hindu |url=https://www.thehindu.com/news/national/digital-personal-data-protection-bill-2023-introduced-in-lok-sabha/article67152910.ece |access-date=2023-08-28 |issn=0971-751X}}</ref>
* On 7 August 2023, the Digital Personal Data Protection Bill, 2023 was passed by [[Lok Sabha]].<ref>{{Cite web |date=2023-08-07 |title=Data protection bill passed by Lok Sabha, next stop Rajya Sabha |url=https://www.moneycontrol.com/news/business/data-protection-bill-passed-by-lok-sabha-next-stop-rajya-sabha-11110631.html |access-date=2023-08-07 |website=Moneycontrol |language=en}}</ref>
* On 9 August 2023, the Digital Personal Data Protection Bill, 2023 was introduced and passed by [[Rajya Sabha]], the upper house of the Parliament of India.<ref>{{Cite web |last=Chishti |first=Aiman J. |date=2023-08-09 |title=Parliament Passes Digital Personal Data Protection Bill |url=https://www.livelaw.in/news-updates/parliament-passes-digital-data-protection-bill-personal-data-234823 |access-date=2023-08-09 |website=www.livelaw.in |language=en}}</ref>
* On 11 August 2023, the [[President of India]] has given assent to the Digital Personal Data Protection Bill, 2023 which now makes it the [[Digital Personal Data Protection Act, 2023]].<ref name=":2">{{Cite web |date=2023-08-11 |title=India gets a data protection law |url=https://www.moneycontrol.com/news/business/india-gets-a-data-protection-law-11164481.html |access-date=2023-08-11 |website=Moneycontrol |language=en}}</ref><ref name=":3">{{Cite news |date=2023-08-12 |title=Digital Personal Data Protection Bill gets nod from President |work=The Economic Times |url=https://economictimes.indiatimes.com/industry/cons-products/electronics/digital-personal-data-protection-bill-gets-nod-from-president/articleshow/102660125.cms?from=mdr |access-date=2023-08-11 |issn=0013-0389}}</ref>
* On 13 November 2025, the Data Protection Board of India was established.<ref>{{Cite web |last=desk |first=TNIE online |date=2025-11-14 |title=Govt notifies rules for DPDP Act, putting India's first digital privacy law into effect |url=https://www.newindianexpress.com/business/2025/Nov/14/govt-notifies-rules-for-dpdp-act-putting-indias-first-digital-privacy-law-into-effect |access-date=2025-11-15 |website=The New Indian Express |language=en}}</ref>

== Structure ==
According to the section 18 of the Digital Personal Data Protection Act, 2023, the board shall consist a Chairperson.<ref name=":1" /> Under the [[Digital Personal Data Protection Rules, 2025]], the board shall consist a Chairperson along with members who will be appointed as per the extant rules.<ref>{{Cite web |title= |url=https://www.meity.gov.in/writereaddata/files/259889.pdf}}</ref>

== Powers and functions ==

* The Data Protection Board shall exercise and perform its powers on receipt of an intimation of personal data breach under sub-section (6) of section 8, to direct any urgent remedial or mitigation measures in the event of a personal data breach, and to inquire into such personal data breach and impose penalty as provided in the Digital Personal Data Protection Act, 2023
* To give directions for remediating or mitigating data breaches
* To inquire into data breaches and complaints and impose financial penalties
* To refer complaints for Alternate Dispute Resolution and to accept Voluntary Undertakings from Data Fiduciaries
* To advise the Government to block the website, app etc. of a Data Fiduciary who is found to repeatedly breach the provisions of the Bill
* Adjucate in case of dispute
* The Board shall determine whether there are sufficient grounds to proceed with an inquiry
* Impose penalty in case of breach of provisions in the Digital Personal Data Protection Act, 2023

== References ==
{{reflist}}

{{Privacy}}

[[Category:Data protection authorities]]
[[Category:Government agencies of India]]

Data Protection Board of India - Revision history

Aspireitacademy at 09:42, 14 January 2026