DPDP reference
Section 18: Establishment of Board
Last checked 6 Nov 2026
The Central Government establishes the Data Protection Board of India by notification, from a date it appoints (s.18(1)). The Board is a body corporate that can hold property, contract, sue and be sued (s.18(2)). The Government notifies its headquarters (s.18(3)).
- Applies to
- The Central Government and the Data Protection Board of India. A business meets this section only when it appears before the Board.
- Starts
- 13 Nov 2025, in force (G.S.R. 843(E), item (a)).
- Penalty
- None of its own. This section sets out how the law works and places no duty on a business.
- Source
- Digital Personal Data Protection Act, 2023 (22 of 2023), section 18; G.S.R. 843(E), commencement
Questions
What is the Data Protection Board of India?
The body established under s.18 to inquire into breaches of the Act, direct remedial steps and impose penalties (s.27).
Related
- Section 19: Composition and qualifications of the Board
- Section 27: Powers and functions of Board
- Section 28: Procedure to be followed by Board
Next
Not legal advice.