/The Act · Chapter V · Data Protection Board of India
Section 25: Members and officers to be public servants
DPDP Act, 2023 (No. 22 of 2023). In force since 13 November 2025.
- Provision
- Section 25 of The Digital Personal Data Protection Act, 2023
- Status
- In force since 13 November 2025 (phase 1) G.S.R. 843(E)
- Rules made under it
- None identified
- Source
- Ministry of Law and Justice (Legislative Department) · 11 August 2023 · Official PDF
The Chairperson, Members, officers and employees of the Board shall be deemed, when acting or purporting to act in pursuance of provisions of this Act, to be public servants within the meaning of section 21 of the Indian Penal Code.
Section 25 of the Digital Personal Data Protection Act clarifies the legal status of the people who work for the Board, which is the regulatory body responsible for enforcing the law. Under this section, the Chairperson, Members, officers, and all employees of the Board are legally classified as public servants. This specific classification is tied to the meaning given in section 21 of the Indian Penal Code. However, this public servant status is not absolute for all their actions in life. It applies specifically when these individuals are acting, or claiming to act, in order to carry out the provisions of the Act. By designating them as public servants during their official duties, the law aligns their legal standing with that of other government officials under the Indian Penal Code.
Key points
- The Chairperson, Members, officers, and employees of the Board are legally deemed to be public servants.
- This classification falls under the meaning of section 21 of the Indian Penal Code.
- This status applies only when they are acting or purporting to act in pursuance of the provisions of the Act.
Common misreadings
- One might assume Board employees are considered public servants in all aspects of their lives, but the text strictly limits this status to when they are acting or purporting to act in pursuance of the Act.
Interpretation prepared from the official text only, 9 September 2026. The official text above prevails.
/MYND · DPDP practice
Putting this into practice?
MYND runs DPDP compliance programmes for the data that flows through HR, payroll, finance and vendor operations: readiness assessments, consent and notice design, processor contracts and breach playbooks. Tell us what you are working on and a compliance lead will reply within one working day.