/The Act · Chapter V · Data Protection Board of India
Section 24: Officers and employees of Board
DPDP Act, 2023 (No. 22 of 2023). In force since 13 November 2025.
- Provision
- Section 24 of The Digital Personal Data Protection Act, 2023
- Status
- In force since 13 November 2025 (phase 1) G.S.R. 843(E)
- Rules made under it
- Rule 21
- Source
- Ministry of Law and Justice (Legislative Department) · 11 August 2023 · Official PDF
The Board may, with previous approval of the Central Government, appoint such officers and employees as it may deem necessary for the efficient discharge of its functions under the provisions of this Act, on such terms and conditions of appointment and service as may be prescribed.
Section 24 allows the Board to hire the staff it needs to carry out its duties under the Act. The Board is the regulatory body established to enforce this law. Before appointing any officers or employees, the Board must first obtain approval from the Central Government. The exact rules for how these employees are hired and the conditions of their service are not listed in this section. Instead, the Act states that these terms and conditions will be set out in rules that may be prescribed later.
Key points
- The Board can appoint officers and employees necessary to efficiently perform its functions.
- The Board must get prior approval from the Central Government before making these appointments.
- The terms and conditions of service for these employees will be prescribed by future rules.
Common misreadings
- Assuming the Board has complete independence to hire staff, when it actually requires prior approval from the Central Government.
- Looking for specific employment terms in the Act, when the text states these will be prescribed later.
Interpretation prepared from the official text only, 9 September 2026. The official text above prevails.
/MYND · DPDP practice
Putting this into practice?
MYND runs DPDP compliance programmes for the data that flows through HR, payroll, finance and vendor operations: readiness assessments, consent and notice design, processor contracts and breach playbooks. Tell us what you are working on and a compliance lead will reply within one working day.