DPDP Wiki Talk to us

/The Rules · 2025

Rule 20: Functioning of Board as digital office

DPDP Rules, 2025, G.S.R. 846(E) dated 13 November 2025. In force since 13 November 2025.

In forceOfficial textIn force since 13 November 2025 (phase 1) · rule 1(2)
Provision
Rule 20 of The Digital Personal Data Protection Rules, 2025
Status
In force since 13 November 2025 (phase 1)
Made under
s. 28 Procedure to be followed by Board
Source
Ministry of Electronics and Information Technology · G.S.R. 846(E) · 13 November 2025 · Official PDF

Rule 20. Functioning of Board as digital office

Verbatim from the Gazette of India

The Board shall function as a digital office, without prejudice to its power to summon and enforce the attendance of any person and examine her on oath, may adopt techno-legal measures to conduct proceedings in a manner that does not require physical presence of any individual.

Interpretation in plain English

Interpretation · not legal advice
Interpretation, not legal advice. This is a plain-English interpretation of the official text, prepared by the DPDP Wiki editorial team. It is not the law and not legal advice, and it may be incomplete or wrong. Always rely on the official text of the Act, the Rules and the notifications, and take advice from a qualified professional for your situation.
BoardData FiduciaryData Principal

Rule 20 establishes that the Data Protection Board of India (the Board) is required to function as a digital office. This means the Board is designed to handle its official work and legal proceedings primarily through digital means, rather than relying entirely on a traditional physical office setup.

To make this possible, the Board is permitted to adopt specific techno-legal measures. These measures allow the Board to conduct its proceedings in a way that does not require the physical presence of any individual. People involved in a dispute or inquiry can participate remotely.

However, operating as a digital office does not take away the Board's traditional legal powers. The rule explicitly clarifies that the Board retains its full authority to summon any person, enforce their physical attendance, and examine them under oath whenever it deems necessary.

Key points

  • The Board is required to function as a digital office.
  • The Board may adopt techno-legal measures to conduct proceedings without requiring anyone's physical presence.
  • The Board retains its power to summon individuals, enforce their attendance, and examine them under oath.

Common misreadings

  • Assuming that a digital office means the Board cannot force someone to appear in person, when the rule explicitly preserves the power to summon and enforce physical attendance.

Interpretation prepared from the official text only, 9 September 2026. The official text above prevails.

/MYND · DPDP practice

Putting this into practice?

MYND runs DPDP compliance programmes for the data that flows through HR, payroll, finance and vendor operations: readiness assessments, consent and notice design, processor contracts and breach playbooks. Tell us what you are working on and a compliance lead will reply within one working day.

How we use these details: only to respond to you. Withdraw any time by writing to sales@myndsol.com. This form is protected against automated submissions.