New Delhi: In a significant step towards operationalising India’s data protection framework, the government has established the Data Protection Board of India (DPBI) under Section 18 of the Digital Personal Data Protection Act, 2023.
The DPBI has been constituted as a body corporate and will function as an independent adjudicatory authority tasked with enforcing the provisions of the Act. Its creation marks a critical milestone in strengthening India’s regulatory architecture for digital personal data, particularly at a time when data governance and privacy concerns are becoming central to the country’s digital economy.
Envisioned as a “digital-by-design” institution, the Board is aligned with the government’s broader objective of enabling efficient, transparent, and technology-driven governance. The move reflects a shift towards modern regulatory frameworks that leverage digital infrastructure for oversight, compliance, and grievance redressal.
The Board will comprise a Chairperson and four Members, forming the core decision-making body responsible for adjudicating disputes, ensuring compliance, and addressing violations under the Act.
In parallel, the government has invited applications to fill the positions of Chairperson and the four Members, signalling the beginning of the Board’s operationalisation phase. The selection of leadership will be crucial in shaping the enforcement approach and effectiveness of India’s data protection regime.
The establishment of the DPBI is expected to have far-reaching implications for businesses, particularly in sectors such as digital advertising, e-commerce, fintech, and OTT platforms, where large-scale personal data processing is integral to operations. Companies will need to align their data handling practices with the provisions of the Act, as regulatory scrutiny is set to increase once the Board becomes fully functional.
With the DPDP Act laying the foundation and the DPBI now taking shape, India is moving closer to a structured and enforceable data protection ecosystem, aimed at balancing innovation with user privacy and accountability.
