India’s Cabinet approved five posts for its new Data Protection Board on Wednesday, May 2026. The decision is a pivotal administrative step toward operationalising the Digital Personal Data Protection Act, 2023, which was enacted two years ago.
The DPDP Act, notified in 2023, lays out a framework that can levy fines up to ₹250 crore for egregious breaches. MeitY said the Board will act as a digital‑first adjudicatory body, handling complaints, inquiries and enforcement proceedings once the substantive provisions of the rules come into force in May 2027.
Applications for the Chairperson and four Members were opened in May 2025. The search‑cum‑selection committee, headed by the Cabinet Secretary, will recommend candidates by the end of next month, MeitY officials confirmed.
For many small‑business owners, the new Board offers a chance to seek redress. An owner of a textile startup in Jaipur said the board could help resolve a recent data‑breach that exposed customer addresses, sparking both relief and concern about regulatory oversight.
The board’s first meeting is slated for July 2026, when the Chairperson and Members will take oath. The appointment of the Chairperson will be announced after the selection process concludes, and the Board will begin filing its inaugural case filings in early 2027.