Govt begins process to appoint members for Data Protection Board
Online office software for the Board is ready, says IT Secretary Krishnan
image for illustrative purpose

New Delhi: The government has begun the groundwork for putting in place the procedure and modalities for appointing members to the new Data Protection Board, while the requisite software for a fully online office of the body has already been developed, IT Secretary S Krishnan has said. Asked about the potential shortening of compliance timelines for big tech under the data protec-tion regime, Krishnan said the government is consulting industry stakeholders to assess their pre-paredness.
He added that since the issue is complex and affects several layers of digital ecosystem, the gov-ernment’s priority is to avoid any disruption.
“On data protection board, we’ve started the process of putting in place the way to identify members and call for their nomination to put them in the positions and posts which the board would need...we are working on that right now, because we have to get it approved,” Krishnan said.
Government is ready with the software required for a completely online office for the Data Pro-tection Board. “So work is going on,” the IT secretary said.
On whether the large companies have opposed shortening of compliance timelines, during their discussions with the IT Ministry, Krishnan said they hadn’t indicated their discomfort with any particular aspect.
“We’ve asked them to tell us when they will be ready and look at specific aspects....because please understand it’s complex,” he said.
The DPDP Act - that defines how entities should collect and process users’ data - envisages es-tablishment of Data Protection Board of India, tasked with monitoring compliance, inquiring into breaches, and imposing penalties, and directing remedial or mitigation measures in case of data breach.
The board functions as an independent body and is set to play a key role in enforcing the rights granted under the Act and maintaining trust in the system.
According to the recently-notified DPDP Rules, the central government will set up a search-cum-selection committee, headed by the Cabinet Secretary, with the Law Secretary, the IT Secretary and two domain experts as members, to recommend names for appointment as chairperson of the data protection Board.
The DPDP Act - that defines how entities should collect and process users’ data - envisages establishment of Data Protection Board of India, tasked with monitoring compliance, in-quiring into breaches, and imposing penalties, and directing remedial or mitigation measures in case of data breach.

