Data Protection Board of India

In one line: The Data Protection Board is the body set up under Section 18 of the DPDP Act to inquire into data breaches and impose penalties.

Role

It receives complaints from data principals and breach reports from fiduciaries, inquires into them, directs remedial measures and imposes monetary penalties under Section 27. Its provisions were among the first brought into force on 13 November 2025.

The independence debate

The Board's chairperson and members are appointed by the Central Government. The news publishers argue that a body that adjudicates rights and imposes heavy penalties should be insulated from the executive and include a judicial member. Critics note that the government can itself be a data fiduciary and a party before the Board. Supporters say a specialised regulator is faster than courts.

Where to go next

• Digital Personal Data Protection Act, 2023
• Right to Information Act, 2005