Skip to main content
Home/DPDP Rules/Rule 17 — Appointment of Chairperson and Other Members
DPDP Rules, 2025 · Rule 17 of 23

Rule 17: Appointment of Chairperson and Other Members

Rule 17 is purely administrative — it doesn't touch businesses or individuals at all. It sets out how the Data Protection Board's own leadership gets appointed.

In force since 13 November 2025Reviewed September 2026
CommencementIn force since 13 November 2025
DPDP Rules, 2025 · Rule 17 of 23

Quick summary

In plain terms: Two Search-cum-Selection Committees recommend individuals for appointment: one (chaired by the Cabinet Secretary) for the Chairperson, and one (chaired by the MeitY Secretary) for other Members. The Central Government appoints based on the Committee's recommendations, and a vacancy or defect in the Committee's own constitution doesn't invalidate its prior actions.

What Rule 17 says

  • A Search-cum-Selection Committee — chaired by the Cabinet Secretary, with the Secretaries in charge of Legal Affairs and Electronics and IT plus two experts, as members — recommends individuals for appointment as Chairperson.
  • A separate Search-cum-Selection Committee — chaired by the MeitY Secretary, with the Secretary in charge of Legal Affairs plus two experts, as members — recommends individuals for appointment as a Member other than the Chairperson.
  • The Central Government appoints the Chairperson or other Member after considering the Committee's recommended individuals.
  • No act or proceeding of either Committee can be questioned merely because of a vacancy or a defect in its constitution.

Breaking it down

There's not much ambiguity to unpack here — it's a straightforward appointments process, worth knowing mainly so you understand who sits on the Board and how they got there.

Two separate committees, one for the top job. The Chairperson's Search-cum-Selection Committee is chaired at Cabinet Secretary level — the most senior civil-service rank — while other Members go through a committee chaired one level below, at the Ministry Secretary level. Both include legal-affairs representation and outside experts.

The “no vacancy invalidates it” clause is a procedural safety net. This is a standard drafting technique in Indian administrative law: it stops a purely technical defect (like one Committee seat being temporarily vacant) from being used to challenge appointments that were otherwise properly made.

Why this rule matters

This rule matters less for what businesses need to do, and more for understanding the Board's legitimacy and independence — knowing the appointment process is layered through senior government committees, not a single minister's discretion, is relevant if you're ever assessing or citing the Board's authority.

Real-world example

Example: Understanding who you're dealing withA company preparing to respond to a Data Protection Board inquiry does some background reading on the Board's composition. Rule 17 tells them the Chairperson was recommended by a Cabinet Secretary-led committee with legal and technical expert input, not appointed at a single official's discretion — useful context, but nothing that changes how the company needs to respond to the inquiry itself.

Who needs to care about this rule

  • Mostly relevant as background for understanding Board governance — this rule creates no obligation for businesses or individuals.

Common questions

Does Rule 17 create any obligation for businesses?
No. It's purely about how the government appoints the Data Protection Board's Chairperson and Members.
Who chairs the Search-cum-Selection Committee for the Board's Chairperson?
The Cabinet Secretary, alongside the Secretaries in charge of Legal Affairs and of Electronics and Information Technology, plus two experts.
Can an appointment be challenged just because a Committee seat was vacant?
No — the Rule specifically protects against that: no act or proceeding of the Committee can be questioned merely on the ground of a vacancy or a defect in its constitution.