India: Ministry of Electronics and Information Technology issued Digital Personal Data Protection Rules including data protection authority governance

On 13 November 2025, the Ministry of Electronics and Information Technology issued the Digital Personal Data Protection Rules implementing the Digital Personal Data Protection Act of 2023. Provisions related to establishing the Data Protection Board took effect on the day of issuance. The Rules set out the appointment process, terms of service, responsibilities of Board members, and the mechanisms for appealing the Board’s decisions. They also explain how the Central Government selects the Board’s leadership. Two Search-cum-Selection Committees are formed, one, chaired by the Cabinet Secretary, recommends candidates for Chairperson, while the other, chaired by the Secretary of the Ministry of Electronics and Information Technology, recommends candidates for the remaining Member positions. Each committee includes senior officials and two experts with relevant experience. The Government will recommend individuals and make the final appointments, and the committees’ proceedings cannot be challenged solely on the basis of vacancies or minor procedural issues.