Section 18: Establishment of Board
←Sec. 17: ExemptionsSec. 17Sec. 19: Composition and qualifications for appointment of Chairperson and MembersSec. 19→
Simple Explanation
Section 18 establishes the Data Protection Board of India as the regulatory authority:
• Statutory Body: The Board is a body corporate, meaning it has a legal identity separate from the government.
• Perpetual Succession: It continues to exist regardless of changes in membership.
• Powers: It can own property, enter contracts, and sue or be sued in court.
• Headquarters: Located at a place to be notified by the Central Government.
The Board functions as India's dedicated data protection regulator, similar to how SEBI regulates securities or TRAI regulates telecom.
Key Points
- ✓Establishes the Data Protection Board of India
- ✓Body corporate with perpetual succession
- ✓Can acquire property, contract, and sue
- ✓Headquarters notified by Central Government
Official Text (Summary)
The Central Government shall establish a body called the Data Protection Board of India. The Board shall be a body corporate with perpetual succession and a common seal, with power to acquire, hold, and dispose of property, and to contract and sue. Its headquarters shall be at a place notified by the Central Government.
Source: The Digital Personal Data Protection Act, 2023 (No. 22 of 2023), Ministry of Law and Justice.
Jump to any Section
More Sections in Chapter V
All Chapters
Is your business DPDP compliant?
Avoid penalties up to ₹250 Crore. Let our experts help you implement consent management, grievance redressal, and data protection measures.
Get a Free Compliance Audit