Skip to main content
Home/DPDP Rules/Rule 19 — Procedure for Meetings of Board and Authentication of Its Orders, Directions and Instruments
DPDP Rules, 2025 · Rule 19 of 23

Rule 19: Procedure for Meetings of Board and Authentication of Its Orders, Directions and Instruments

Rule 19 is the Data Protection Board's own internal rulebook for how it runs meetings, votes, and signs off on its orders — plus a firm six-month clock on how long its inquiries can take.

In force since 13 November 2025Reviewed September 2026
CommencementIn force since 13 November 2025
DPDP Rules, 2025 · Rule 19 of 23

Quick summary

In plain terms: The Chairperson sets meeting agendas; one-third of the Board's membership forms a quorum; decisions go by majority vote with the Chairperson holding a casting vote; and the Board's inquiries must be completed within six months of receiving a complaint, reference or direction, extendable by the Board in writing up to three months at a time.

What Rule 19 says

  • The Chairperson fixes the date, time and place of Board meetings and approves the agenda.
  • Meetings are chaired by the Chairperson, or in her absence by a Member the other Members present choose.
  • One-third of the Board's membership is the quorum for meetings.
  • Decisions go by majority vote of Members present and voting; the Chairperson (or whoever is chairing) gets a casting vote in case of a tie.
  • A Member with an interest in a matter must not participate in or vote on it.
  • In an emergency where a meeting isn't feasible, the Chairperson can take action recording reasons in writing, to be ratified by the Board at its next meeting within seven days of communication to Members.
  • The Board, any Member, or an authorised individual, may authenticate the Board's orders, directions or instruments.
  • The Board's inquiry into an intimation, complaint, reference or direction under Section 27 of the Act must be completed within six months of receipt, extendable by the Board (recording reasons in writing) for further periods not exceeding three months at a time.

Breaking it down

Most of this rule is standard institutional-governance procedure, but two provisions are genuinely useful to know if you're ever on the receiving end of a Board matter:

The six-month inquiry clock. If you're a party to a Board inquiry — whether as a complainant or as the entity being inquired into — the Board is required to complete that inquiry within six months of receiving the underlying intimation, complaint, reference or direction. It can extend this, but only in three-month increments and only with written reasons recorded, not indefinitely or informally.

Conflict-of-interest recusal is built in. A Member with an interest in a matter before the Board cannot participate in deciding it — a standard safeguard for the Board's impartiality.

Emergency action is possible, but has to be ratified. The Chairperson can act alone in a genuine emergency, but that action must be recorded with reasons and brought back to the full Board for ratification within seven days — it isn't a way to bypass the Board's collective decision-making on an ongoing basis.

Why this rule matters

If your organisation is ever party to a Board complaint or inquiry, knowing there's a firm (if extendable) six-month timeline gives you a realistic sense of how long the process should take — useful for planning, and a benchmark if a matter seems to be dragging without the Board recording an extension.

Real-world example

Example: Tracking an inquiry's timelineA company under Board inquiry following a user complaint notes the date the Board received the complaint, and calendars the six-month deadline that follows from Rule 19. When the inquiry is still ongoing close to that date, the company's legal team checks whether the Board has recorded a written extension (permitted, in up to three-month increments) rather than assuming the process can simply continue indefinitely without one.

Who needs to care about this rule

  • Anyone party to a Board inquiry — complainant or respondent — who wants to understand the process timeline.
  • Otherwise mostly internal to how the Board itself operates.

Common questions

How long can a Data Protection Board inquiry take?
Six months from receipt of the relevant intimation, complaint, reference or direction, extendable by the Board in writing for further periods of up to three months at a time.
What is the quorum for a Board meeting?
One-third of the Board's total membership.
Can a Board Member vote on a matter they have a personal interest in?
No — a Member with an interest in an item of business must not participate in or vote on it; the decision is taken by the majority of the other Members present and voting.