Introduction and Legislative Background
The data protection law of India has been in development for many years and is currently at a crucial point. The Digital Personal Data Protection Act 2023 (DPDP Act) is a major piece of legislation that establishes a comprehensive framework for the protection of personal data. Nevertheless, there have been delays in the establishment of the enforcement agency of the Act, namely, the Data Protection Board of India (DPBI).
The DPDP Act got its Presidential assent in August 2023 and paved the way for a robust data protection framework. After a long period of consultations, the Government notified the Digital Personal Data Protection Rules, 2025 (DPDP Rules) on November 13, 2025, thereby bringing into force several key provisions of the Act, particularly those relating to the establishment and functioning of the DPBI. The Board is designed as a quasi-judicial body responsible for adjudicating disputes, enforcing statutory obligations, and imposing
