Status
- Established: the Central Government established the Data Protection Board of India under section 18 by notification G.S.R. 844(E) dated 13 November 2025, with its headquarters in the National Capital Region.
- Applications invited: a MeitY circular dated 6 May 2026 invited applications for one Chairperson and four Members.
- Advertisement: the Lok Sabha answer of 12 August 2026 says the recruitment advertisement was published in the Employment News on 6 June 2026. The answer did not report any appointment, and did not give numbers of breach intimations, complaints or Consent Manager registrations.
- Appointments: we have found no official notification appointing the Chairperson or any Member. A news report of a Kerala High Court order of October 2026 recorded the Centre's submission that the Board was constituted but not yet functional (see the tracker).
Composition under the law
The Board has a Chairperson and other Members as notified, and at least one must be an expert in law (section 19). Members hold office for two years and can be reappointed (section 20). Search-cum-Selection Committees recommend candidates (rule 17). The Board functions as a digital office (rule 20).
Orders and complaints
No Board orders, directions or penalties have been published. The Board's functions of inquiring into breaches and complaints and imposing penalties start on 13 May 2027 (section 27, section 28, section 33). Its function on breaches of Consent Manager registration conditions starts on 13 November 2026. We have found no official Board website or complaint portal. We will list orders here, with links, when the Board publishes them.
This page relies on official publications, plus one clearly labelled court report. Last checked 02 November 2026.