BREAKING: Data Protection Board to have a chairperson and four members, headquarters set in Delhi

DPB to serve as adjudicatory authority for data breaches and compliance disputes under DPDPA.

By  Akanksha Nagar| Nov 14, 2025 11:39 AM

The Ministry of Electronics and Information Technology (MeitY) has officially notified the Digital Personal Data Protection (DPDP) Rules, 2025, laying out the operational framework for India’s data protection regime under the DPDP Act, 2023. The notification follows public consultation on the draft rules issued in January this year, with objections and suggestions now incorporated by the government.

As per the rules, the structure of the Data Protection Board (DPB), which will function with a chairperson and a four-member composition and be headquartered in New Delhi.

The board, established under the Digital Personal Data Protection Act (DPDPA) 2023, will act as the adjudicatory body for data breaches, user complaints, and non-compliance cases involving companies and intermediaries. The five members will include a chairperson and four full-time members with expertise in law, technology, cybersecurity, and governance.

Once operational, the DPB will be responsible for issuing penalties, directing remedial actions, and ensuring that data fiduciaries follow the obligations laid out in the Act.

First Published onNov 14, 2025 11:39 AM

SPOTLIGHT

Brand MakersDil Ka Jod Hai, Tootega Nahin

"The raucous, almost deafening, cuss words from the heartland that Piyush Pandey used with gay abandon turned things upside down in the old world order."

Read More

The new face of the browser: Who’s building AI-first browsers, what they do and how they could upend advertising

From OpenAI’s ChatGPT-powered Atlas to Microsoft’s Copilot-enabled Edge, a new generation of AI-first browsers is transforming how people search, surf and interact online — and reshaping the future of digital advertising.