BREAKING: Data Protection Board to have a chairperson and four members, headquarters set in Delhi

DPB to serve as adjudicatory authority for data breaches and compliance disputes under DPDPA.

By  Akanksha Nagar| Nov 14, 2025 11:39 AM

The Ministry of Electronics and Information Technology (MeitY) has officially notified the Digital Personal Data Protection (DPDP) Rules, 2025, laying out the operational framework for India’s data protection regime under the DPDP Act, 2023. The notification follows public consultation on the draft rules issued in January this year, with objections and suggestions now incorporated by the government.

As per the rules, the structure of the Data Protection Board (DPB), which will function with a chairperson and a four-member composition and be headquartered in New Delhi.

The board, established under the Digital Personal Data Protection Act (DPDPA) 2023, will act as the adjudicatory body for data breaches, user complaints, and non-compliance cases involving companies and intermediaries. The five members will include a chairperson and four full-time members with expertise in law, technology, cybersecurity, and governance.

Once operational, the DPB will be responsible for issuing penalties, directing remedial actions, and ensuring that data fiduciaries follow the obligations laid out in the Act.

First Published onNov 14, 2025 11:39 AM

SPOTLIGHT

Special CoverageCalling India’s Boldest Brand Makers: Entries Open for the Storyboard18 Awards for Creativity

From purpose-driven work and narrative-rich brand films to AI-enabled ideas and creator-led collaborations, the awards reflect the full spectrum of modern creativity.

Read More

“Confusion creates opportunity for agile players,” Sir Martin Sorrell on industry consolidation

Looking ahead to the close of 2025 and into 2026, Sorrell sees technology platforms as the clear winners. He described them as “nation states in their own right”, with market capitalisations that exceed the GDPs of many countries.