DPDP reference

Section 19: Composition and qualifications of the Board

Last checked 6 Nov 2026

The Board has a Chairperson and as many other Members as the Government notifies (s.19(1)), appointed by the Government as prescribed (s.19(2)). Each must have ability, integrity and standing, with special knowledge or practical experience in fields such as data governance, consumer protection, dispute resolution, technology and law. At least one must be an expert in law (s.19(3)).

Applies to
The Central Government and the Data Protection Board of India. A business meets this section only when it appears before the Board.
Starts
13 Nov 2025, in force (G.S.R. 843(E), item (a)).
Penalty
None of its own. This section sets out how the law works and places no duty on a business.
Source
Digital Personal Data Protection Act, 2023 (22 of 2023), section 19; G.S.R. 843(E), commencement

Questions

Must a Board Member be a lawyer?

At least one among the Chairperson and Members must be an expert in the field of law (s.19(3)).

Related

Next

Join early access

Not legal advice.