How to Read the Data Protection Board's Composition and Appointment Rules
Every remedy the Digital Personal Data Protection Act, 2023 gives a data principal runs through one body, so the composition and appointment of the Data Protection Board is not an administrative footnote. Sections 18 to 20 of the Act and rules 17 and 18 of the Digital Personal Data Protection Rules, 2025 are the machinery, and unlike most of the framework they are in force. Reading them closely is how an adviser works out what the Board is, who staffs it, and what has to happen before it can do anything.
Step 1: Note That This Part Is in Force
Under the commencement notification G.S.R. 843(E) dated November 13, 2025, sections 18 to 26 of the Act came into force at once, and under the Rules notified by G.S.R. 846(E) of the same date, rules 1, 2 and 17 to 21 came into force on publication. The Board's establishment, its composition and the appointment machinery are therefore operative.
That is the opposite of the position for the substantive duties, which sit in the eighteen month group and become operative in May 2027. The distinction is worth drawing for a client who asks why there is a Board but no enforcement: the body exists in law, while the powers it will exercise have not yet commenced.
Step 2: Read Section 18 for What the Board Actually Is
Section 18(1) provides that there shall be established, for the purposes of the Act, a Board to be called the Data Protection Board of India, with effect from such date as the Central Government may notify. Section 18(2) makes it a body corporate by that name, having perpetual succession and a common seal.
Body corporate status is the part most summaries leave out, and it matters. It means the Board can sue and be sued in its own name rather than through the Union, which is relevant to how proceedings against it are framed. Section 18(3) leaves the headquarters to be notified by the Central Government.
Step 3: Read Section 19 for Size and Qualification
Section 19(1) provides for a Chairperson and such number of other Members as the Central Government may notify, so the size of the Board is set administratively rather than by the Act. Section 19(2) provides that the Chairperson and other Members are appointed by the Central Government in such manner as may be prescribed.
Section 19(3) sets the qualification. An appointee is to be a person of ability, integrity and standing who possesses special knowledge or practical experience in the fields the provision lists, and at least one among them is to be an expert in the field of law. The legal expertise requirement is a floor of one, not a composition rule, which is a fair point to make about a body that will decide questions of statutory construction and impose penalties.
Step 4: Read Section 20 for Tenure, and Notice How Short It Is
Section 20(1) provides that the salary, allowances and other terms and conditions of service are as prescribed, and that they shall not be varied to the disadvantage of the Chairperson or a Member after appointment. Section 20(2) fixes the term of office at two years and makes the holder eligible for re-appointment.
A two year term with eligibility for re-appointment is the structural feature to flag. The protection against variation of terms runs one way only, and a short renewable term is a weaker guarantee of independence than a long fixed one. That is an observation about design rather than a prediction about conduct, and it belongs in any serious note on the Board's standing.
Step 5: Read Rule 17 for the Two Selection Committees
Rule 17 does not create one committee but two. Under rule 17(1), the Central Government constitutes a Search-cum-Selection Committee for the Chairperson with the Cabinet Secretary as its chairperson, the Secretaries in charge of the Department of Legal Affairs and of the Ministry of Electronics and Information Technology as members, and two experts of repute.
Under rule 17(2), the committee for a Member other than the Chairperson is chaired by the Secretary in the Ministry of Electronics and Information Technology, with the Secretary in charge of the Department of Legal Affairs and two experts of repute. The seniority difference between the two committees is deliberate and it tells you how the two kinds of appointment are weighted.
Step 6: Note the Recommendation Is Not Binding, and the Saving Clause
Rule 17(3) provides that the Central Government appoints the Chairperson or other Member after considering the suitability of the individuals recommended by the committee. The verb is considering, so the recommendation informs the appointment rather than determining it.
Rule 17(4) then provides that no act or proceeding of a committee shall be called in question merely on the ground of the existence of any vacancy in, or absence from, the committee. A challenge to an appointment built on the composition of the committee alone runs straight into that clause, which is worth knowing before the ground is pleaded.
Step 7: Check the Stage of the Process Before Advising
Rule 18 provides that the Chairperson and every other Member receive such salary and allowances, and have such other terms and conditions of service, as are specified in the Fifth Schedule. The machinery is complete on paper, which makes the stage of the process the only live question.
Answering Lok Sabha Unstarred Question No. 3960 on August 12, 2026, the Ministry of Electronics and Information Technology described the Board as composed of a Chairperson and four Members to be appointed through a Search-cum-Selection Committee, and recorded that the advertisement was published in Employment News on June 6, 2026. An adviser should treat that as the position on its date and check it afresh, because the availability of every remedy under the Act turns on it.
Common Pitfalls to Avoid
Treating the whole framework as dormant: Sections 18 to 26 and rules 17 to 21 came into force on publication, even though the substantive duties commence in the eighteen month group.
Missing that the Board is a body corporate: Section 18(2) gives it perpetual succession and a common seal, which affects how proceedings involving it are framed.
Assuming the Act fixes the number of Members: Section 19(1) leaves the number to be notified by the Central Government.
Overstating the legal expertise requirement: Section 19(3) requires at least one expert in the field of law, not a legally qualified majority.
Forgetting how short the term is: Section 20(2) provides a term of two years with eligibility for re-appointment.
Treating the recommendation as binding: Rule 17(3) has the Central Government appoint after considering the suitability of those recommended.
Pleading a committee defect: Rule 17(4) bars a challenge founded merely on a vacancy in or absence from the committee.
Key Statutory Provisions
Section 18 of the Digital Personal Data Protection Act, 2023: Establishment of the Data Protection Board of India with effect from a notified date, its status as a body corporate with perpetual succession and a common seal, and its headquarters at a place to be notified.
Section 19 of the Act: A Chairperson and such number of other Members as the Central Government may notify, appointed by the Central Government in the prescribed manner, each a person of ability, integrity and standing with special knowledge or practical experience, at least one of them an expert in the field of law.
Section 20 of the Act: Salary, allowances and other terms of service as prescribed and not to be varied to the holder's disadvantage after appointment, with a term of office of two years and eligibility for re-appointment.
Rule 17 of the Digital Personal Data Protection Rules, 2025: Two Search-cum-Selection Committees, the first for the Chairperson chaired by the Cabinet Secretary and the second for other Members chaired by the Secretary in the Ministry of Electronics and Information Technology, appointment by the Central Government after considering the suitability of those recommended, and a bar on questioning a committee's proceedings merely for a vacancy or absence.
Rule 18 of the Rules: The salary, allowances and other terms and conditions of service of the Chairperson and every other Member are those specified in the Fifth Schedule.
Sources and References
Disclaimer: This article is for informational purposes only and does not constitute legal advice. Readers should consult a qualified legal professional for advice specific to their circumstances.
Comments