---
title: "Data Protection Board of India: Status and Powers | dpdpr.in"
description: "Data Protection Board of India: when it was set up, headquarters, the status of the Chairperson and Member appointments, and its powers under the DPDP Act."
url: "https://dpdpr.in/board/"
canonical: "https://dpdpr.in/board/"
site: "dpdpr.in"
updated: "2026-11-02"
disclaimer: "Independent reference, not legal advice. Not affiliated with the Government of India or MeitY."
---

# Data Protection Board of India

## Status

- **Established:** the Central Government established the Data Protection Board of India under section 18 by [notification G.S.R. 844(E) dated 13 November 2025](https://www.meity.gov.in/static/uploads/2025/11/cc217843dc3bcb37b2b05bcc3b4e031f.pdf), with its headquarters in the National Capital Region.
- **Applications invited:** a [MeitY circular dated 6 May 2026](https://www.meity.gov.in/static/uploads/2026/05/cd481c027470b420b4cb85fb40a91c53.pdf) invited applications for one Chairperson and four Members.
- **Advertisement:** the [Lok Sabha answer of 12 August 2026](https://sansad.in/getFile/lsapps/loksabhaquestions/annex/188/AU3960_GyWSTk.pdf) says the recruitment advertisement was published in the Employment News on 6 June 2026. The answer did not report any appointment, and did not give numbers of breach intimations, complaints or Consent Manager registrations.
- **Appointments:** we have found no official notification appointing the Chairperson or any Member. A news report of a Kerala High Court order of October 2026 recorded the Centre's submission that the Board was constituted but not yet functional (see the [tracker](https://dpdpr.in/enforcement/#2026-10-kerala-hc-digi-yatra)).

## Composition under the law

The Board has a Chairperson and other Members as notified, and at least one must be an expert in law ([section 19](https://dpdpr.in/act/section-19/)). Members hold office for two years and can be reappointed ([section 20](https://dpdpr.in/act/section-20/)). Search-cum-Selection Committees recommend candidates ([rule 17](https://dpdpr.in/rules/rule-17/)). The Board functions as a digital office ([rule 20](https://dpdpr.in/rules/rule-20/)).

## Orders and complaints

**No Board orders, directions or penalties have been published.** The Board's functions of inquiring into breaches and complaints and imposing penalties start on 13 May 2027 ([section 27](https://dpdpr.in/act/section-27/), [section 28](https://dpdpr.in/act/section-28/), [section 33](https://dpdpr.in/act/section-33/)). Its function on breaches of Consent Manager registration conditions starts on 13 November 2026. We have found no official Board website or complaint portal. We will list orders here, with links, when the Board publishes them.

This page relies on official publications, plus one clearly labelled court report. Last checked 02 November 2026.