MeitY doubles budget for Data Protection Board to enhance oversight

The budget allocates ₹50 lakh for infrastructure, including the digital portal, and ₹4.5 crore for operational costs like salaries, administration, and essential activities

The Ministry of Electronics and Information Technology (MeitY) has announced a substantial increase in the budget for the Data Protection Board of India (DPBI) for the fiscal year 2026. The allocation has been boosted by 2.5 times, now totalling ₹5 crore, signalling the government’s heightened focus on personal data protection and the swift implementation of the Digital Personal Data Protection Act, 2023.

Boosting infrastructure and operational capacity

The enhanced budget breakdown reveals that ₹50 lakh will be allocated for capital expenditure, which will go towards developing key infrastructure, such as the DPBI's digital portal. Meanwhile, the bulk of the funds—₹4.5 crore—will cover revenue expenditure, primarily supporting operational costs like staff salaries, administrative expenses, and other essential activities critical to the board’s functioning.

Also Read: India’s Data Protection Approach Won’t Hinder Innovation Ashwini Vaishnaw

The DPBI is integral to the implementation of the Digital Personal Data Protection Act, 2023, which was gazetted in August of last year. The board will oversee the enforcement of data protection regulations, including monitoring compliance with data handling practices by both public and private entities. MeitY's draft rules, released for consultation in January 2025, set the stage for a phased approach to implementation, beginning with provisions related to the DPBI.

Union IT Minister Ashwini Vaishnaw stated that the final version of the data protection rules is expected to be notified by mid-2025. Once enacted, both government and private sector organizations will have two years to comply with the new regulations. This grace period will allow them time to adjust their data practices to meet the new standards.

The DPBI will operate as a primarily digital entity, staffed by a chairperson and other members appointed by the central government. It will have the authority to direct data fiduciaries to rectify any breaches or complaints, playing a key role in safeguarding citizens' personal information across industries.

Also Read: Explanatory note to Digital Personal Data Protection Rules, 2025