Rule 21: Terms and conditions of appointment and service of officers and employees of Board

Rule 21 of the Digital Personal Data Protection Rules, 2025, explains how the Data Protection Board of India (the Board) can hire its staff. The Board is the body responsible for enforcing the law. Under this rule, the Board is allowed to appoint officers and employees that it believes are necessary to efficiently carry out its duties under the Digital Personal Data Protection Act, 2023.\n\nHowever, the Board cannot make these appointments entirely on its own. It must get prior approval from the Central Government before hiring these officers and employees. This ensures the government oversees the staffing of the Board.\n\nOnce hired, the rules governing the employment of these staff members are strictly defined. The specific terms and conditions of service for the Board's officers and employees are set out in the Sixth Schedule of the rules.

Key points

• The Board can appoint officers and employees necessary to efficiently discharge its functions under the Act (1).
• The Board must obtain previous approval from the Central Government before making these appointments (1).
• The terms and conditions of service for these officers and employees are specified in the Sixth Schedule (2).

Common misreadings

• People might think the Board can hire staff independently, but it requires prior approval from the Central Government.
• People might assume the Board sets its own employment terms, but these are specifically dictated by the Sixth Schedule.