Rule 19: Procedure for Meetings of Board and Authentication of Its Orders, Directions and Instruments
Rule 19 is the Data Protection Board's own internal rulebook for how it runs meetings, votes, and signs off on its orders — plus a firm six-month clock on how long its inquiries can take.
Quick summary
What Rule 19 says
- The Chairperson fixes the date, time and place of Board meetings and approves the agenda.
- Meetings are chaired by the Chairperson, or in her absence by a Member the other Members present choose.
- One-third of the Board's membership is the quorum for meetings.
- Decisions go by majority vote of Members present and voting; the Chairperson (or whoever is chairing) gets a casting vote in case of a tie.
- A Member with an interest in a matter must not participate in or vote on it.
- In an emergency where a meeting isn't feasible, the Chairperson can take action recording reasons in writing, to be ratified by the Board at its next meeting within seven days of communication to Members.
- The Board, any Member, or an authorised individual, may authenticate the Board's orders, directions or instruments.
- The Board's inquiry into an intimation, complaint, reference or direction under Section 27 of the Act must be completed within six months of receipt, extendable by the Board (recording reasons in writing) for further periods not exceeding three months at a time.
Breaking it down
Most of this rule is standard institutional-governance procedure, but two provisions are genuinely useful to know if you're ever on the receiving end of a Board matter:
The six-month inquiry clock. If you're a party to a Board inquiry — whether as a complainant or as the entity being inquired into — the Board is required to complete that inquiry within six months of receiving the underlying intimation, complaint, reference or direction. It can extend this, but only in three-month increments and only with written reasons recorded, not indefinitely or informally.
Conflict-of-interest recusal is built in. A Member with an interest in a matter before the Board cannot participate in deciding it — a standard safeguard for the Board's impartiality.
Emergency action is possible, but has to be ratified. The Chairperson can act alone in a genuine emergency, but that action must be recorded with reasons and brought back to the full Board for ratification within seven days — it isn't a way to bypass the Board's collective decision-making on an ongoing basis.
Why this rule matters
If your organisation is ever party to a Board complaint or inquiry, knowing there's a firm (if extendable) six-month timeline gives you a realistic sense of how long the process should take — useful for planning, and a benchmark if a matter seems to be dragging without the Board recording an extension.
Real-world example
Who needs to care about this rule
- Anyone party to a Board inquiry — complainant or respondent — who wants to understand the process timeline.
- Otherwise mostly internal to how the Board itself operates.
Common questions
How long can a Data Protection Board inquiry take?
What is the quorum for a Board meeting?
Can a Board Member vote on a matter they have a personal interest in?
Related rules
Rule 18 — Salary, Allowances and Other Terms and Conditions of Service of Chairperson and Other Members
Read the previous rule in sequence.
Read Rule 18Rule 20 — Functioning of Board as Digital Office
Continue to the next rule in sequence.
Read Rule 20Full DPDP Rules Guide
Back to the overview page, with the complete rule-by-rule guide and Schedules at a glance.
View all 23 rules
