dpdpr.in

Section 18. Establishment of Board

DPDP Act, 2023 · Chapter V: Data Protection Board of India

In simple words

This section sets up the Data Protection Board of India as a body corporate. The Government decides where its headquarters is.

What this means for you
The Board is where you can complain if a company does not fix your problem.
What this means for businesses
The Board will inquire into breaches and can impose penalties once its powers start.
Everyday example
The Board was established by notification G.S.R. 844(E) dated 13 November 2025, with its headquarters in the National Capital Region.

Who it applies to

The Central Government and the Board.

Related Rules

Related sections

Official textas notified

Source: MeitY copy of the Gazette (CG-DL-E-12082023-248045), page 12. Printed dashes are shown as colons; the wording is unchanged.

(1) With effect from such date as the Central Government may, by notification, appoint, there shall be established, for the purposes of this Act, a Board to be called the Data Protection Board of India.

(2) The Board shall be a body corporate by the name aforesaid, having perpetual succession and a common seal, with power, subject to the provisions of this Act, to acquire, hold and dispose of property, both movable and immovable, and to contract and shall, by the said name, sue or be sued.

(3) The headquarters of the Board shall be at such place as the Central Government may notify.

On this page
  1. In simple words
  2. Who it applies to
  3. Related Rules
  4. Official text