Chapter V — Data Protection Board of India

Section 18 — Establishment of Board

18. (1) With effect from such date as the Central Government may, by notification, appoint, there shall be established, for the purposes of this Act, a Board to be called the Data Protection Board of India.

(2) The Board shall be a body corporate by the name aforesaid, having perpetual succession and a common seal, with power, subject to the provisions of this Act, to acquire, hold and dispose of property, both movable and immovable, and to contract and shall, by the said name, sue or be sued.

(3) The headquarters of the Board shall be at such place as the Central Government may notify.

Source: The Digital Personal Data Protection Act, 2023 (No. 22 of 2023), Act No. 22 of 2023, Gazette of India Extraordinary, 11 August 2023; SHA-256 4deb23981d30… — verified copy

Plain-language note

Plain-language note pending

Questions people ask about this provision

  • Who needs to comply with the DPDP Act?
  • What is the role of the Data Protection Board under the DPDP Act?
  • Who enforces the DPDP Act, and what are the penalties?
  • What happens after a complaint reaches the Data Protection Board under the DPDP Act?

Taught in Enforcement