Plain-language help for ordinary people. General information, not legal advice. Helplines, portals and screen names were checked against official Government and regulator pages on 1 November 2026. Portals change: if a screen looks different, follow the words on the screen and the official guide linked in each step.
The Data Protection Board of India was established on 13 November 2025 (G.S.R. 844(E)). See our Board page for its status and members.
What it can do
- Inquire into a complaint by you about a breach of your rights or of a company's duties (section 27(1)(b)). This power starts on 13 May 2027.
- Direct urgent steps after a data breach, and inquire into it (section 27(1)(a)).
- Summon people, take evidence and inspect documents, like a civil court (section 28(7)).
- Impose penalties up to the amounts in the Schedule, for example up to Rs 250 crore for failing to protect data and up to Rs 200 crore for failing to report a breach (section 33).
- Send a dispute to mediation (section 31).
- Accept a voluntary undertaking from a company and close the case on that basis (section 32).
- Hear Consent Manager registration breaches from 13 November 2026 (section 27(1)(d)).
What it cannot do
- Pay you compensation. Penalties go to the Consolidated Fund of India (section 34). For money, use sector routes like the RBI Ombudsman or the Consumer Commission.
- Hear your complaint before you use the company's grievance route (section 13(3)).
- Take rights complaints before 13 May 2027.
- Investigate crimes. Fraud and threats go to the police and 1930.
- Hear cases the Act does not cover, such as purely personal or domestic use of data (section 3).
After the Board decides
- Either side can appeal to the Appellate Tribunal (TDSAT) within 60 days of receiving the order (section 29). It aims to decide within six months.
- Civil courts cannot hear matters the Board is empowered to decide (section 39).
- False or frivolous complaints break your duties under section 15, and can be fined up to Rs 10,000.
How you will complain
The Board works as a digital office (section 28(1)). Rule 19 says complaints will be made using the method it publishes on its website and app. We will add that link when it is published.