DPDP reference
Rule 19: Procedure for meetings of Board and authentication of orders
Last checked 6 Nov 2026
The Chairperson fixes meetings and the agenda (Rule 19(1)). One third of the membership is the quorum (Rule 19(3)), and decisions are by majority, with a casting vote for whoever chairs (Rule 19(4)). A Member with an interest takes no part (Rule 19(5)). In an emergency the Chairperson may act and report within seven days (Rule 19(6)).
An inquiry is completed within six months of the intimation, complaint, reference or direction, unless the Board extends it, with written reasons, by up to three months at a time (Rule 19(9)).
- Applies to
- The Central Government, the Board and its staff. A business meets this rule only when it appears before the Board.
- Starts
- 13 Nov 2025, in force (Rule 1(2)).
- Penalty
- None of its own. This rule sets out how the law works and places no duty on a business.
- Source
- G.S.R. 846(E), Digital Personal Data Protection Rules, 2025, rule 19; G.S.R. 892(E), corrigenda
Questions
How long can a Board inquiry take?
Six months from receipt, extendable with written reasons by up to three months at a time (Rule 19(9)).
Related
- Section 23: Proceedings of Board
- Section 28: Procedure to be followed by Board
- Rule 20: Functioning of Board as digital office
Next
Not legal advice.