wordpress blog stats
Connect with us

Hi, what are you looking for?

How Exactly Will the “Independent” Data Protection Board of India Be Funded? #PrivacyNama2023

Experts at MediaNama’s PrivacyNama conference exchange notes on the vagueness that surrounds the funding of the Data Protection Board under the Digital Personal Data Protection Act, 2023.

While the Digital Personal Data Protection Act institutes the Data Protection Board of India as the country’s data privacy regulator, little is known about how its day-to-day operations of settling privacy complaints will be funded. The Act doesn’t specify much on these lines—and even the penalties the Board imposes on non-compliant actors will be deposited elsewhere, and not with the Board itself. Experts at MediaNama’s PrivacyNama conference exchanged notes on how the government may work around this gap to ensure that the state-appointed yet ‘independent’ Board operates smoothly.

“This [data protection] law says that penalties [for non-compliance by companies and people] will actually go to the Consolidated Fund of India, which is a good thing, because the agency [the Data Protection Board of India] should not have the incentive to keep imposing penalties to enrich itself,” Carnegie India’s Anirudh Burman pointed at while speaking during the “Data Protection Board” session of the conference. “But having said that, this law also does not have any provision for the agency, for the Board, to collect fees. It also does not have any provision in the law for the central government to make grants to the board for its functioning, for salaries and expenses.”

“When you set up a new board or an agency which is supposed to be at arm’s length [from the government], you are worried about three things,” Burman explained. “One is independence, the other is accountability, and the third is whether the agency will function properly. So, you are worried about the finances from all three points of view. What you typically do for a regulatory agency—and again, this is not a typical regulatory agency, it’s an independent body—is create a separate fund, which is a bank account where all the money collected by the regulatory agency gets deposited and is used for meeting its expenses. In addition, if the Central government wants to give money to the agency to support it financially—because not all regulatory boards are financially viable on their own—the Central government can make a grant. All of this is usually written down in the law very, very clearly and specifically, that the Central government can make grants to the body for salaries, expenses, etc. [Also, the law could mention] The regulatory body can collect fees and other charges for meeting its expenses and so on and so forth. [But] There is nothing like that in this [data protection] law.”

Chaired by PSA Legal’s Arya Tripathy, Burman was joined by Alok Prasanna Kumar (Vidhi Centre for Legal Policy), S. Chandrasekhar (K&S Digiprotect), and Meghna Bal (Esya Centre).

S. Chandrasekhar appeared clear that the Board’s funding would be a “line item” in the Indian government’s IT Ministry’s annual budget. “It’s a small board, I don’t think financing will be a problem at all,” Chandrasekhar said. “MeitY [the Ministry of Electronics and Information Technology] is going to fund this body.”

“On penalties and accrual of penalties, even if it did go to the Board, it will take a long time for the realization of any penalties given that you have so many stages of appeal,” Esya Centre’s Meghna Bal drily pointed out. “Take the example of the Competition Commission of India [India’s antitrust regulator], where collection of penalties is a problem—it takes about 10 years for a case to reach its conclusion.”


Advertisement. Scroll to continue reading.

Could rules issued under the data protection law clarify the Board’s funding? MediaNama’s Editor Nikhil Pahwa posed this question—to which Burman responded that “even the rules have to be guided by the [parent] law, right? You cannot create a rule unless there’s no legal provision enabling you to write the rule.”

“Constitutionally you cannot appropriate money on the basis of rules,” added Vidhi’s Alok Prasanna Kumar. “It has to be something that parliament has to vote on.”

An appropriations bill could solve the funding quandary“The government may make an appropriation bill, [it] doesn’t have to amend this law [on data protection to insert funding clauses],” Prasanna Kumar suggested. “It will have to pass a separate appropriations bill where it says ‘we’re going to give X amount of money to the Data Protection Board of India’, right? So that will bring the money in. [Also] There is no provision here mandating that the government spend a certain amount or give a certain amount to this particular body. So, each year, this body will be at the mercy of [the government, asking] what will be the amount that the government will give us, how much they will allow us to function and so on and so forth. It is not like, say courts, [where] their budgets are basically charged to the Consolidated Fund of India. It’s just parliament which…approves of it. [To sum up] This Board will be dependent on the government passing an appropriations bill, saying ‘this amount is going to go to the DPBI or that particular ministry’, which I think is going to be the Ministry of Electronics and Information Technology.”

You can watch the video of the discussion here:

This discussion was organised with support from Meta, PhonePe, Google, and Salesforce, and in partnership with CUTS and the Centre for Communication Governance.

Advertisement. Scroll to continue reading.

STAY ON TOP OF TECH NEWS: Our daily newsletter with the top story of the day from MediaNama, delivered to your inbox before 9 AM. Click here to sign up today!

Read more

Written By

I'm interested in stories that explore how countries use the law to govern technology—and what this tells us about how they perceive tech and its impacts on society. To chat, for feedback, or to leave a tip: aarathi@medianama.com

MediaNama’s mission is to help build a digital ecosystem which is open, fair, global and competitive.



Factors like Indus not charging developers any commission for in-app payments and antitrust orders issued by India's competition regulator against Google could contribute to...


Is open-sourcing of AI, and the use cases that come with it, a good starting point to discuss the responsibility and liability of AI?...


RBI Deputy Governor Rabi Shankar called for self-regulation in the fintech sector, but here's why we disagree with his stance.


Both the IT Minister and the IT Minister of State have chosen to avoid the actual concerns raised, and have instead defended against lesser...


The Central Board of Film Certification found power outside the Cinematograph Act and came to be known as the Censor Board. Are OTT self-regulating...

You May Also Like


Google has released a Google Travel Trends Report which states that branded budget hotel search queries grew 179% year over year (YOY) in India, in...


135 job openings in over 60 companies are listed at our free Digital and Mobile Job Board: If you’re looking for a job, or...


By Aroon Deep and Aditya Chunduru You’re reading it here first: Twitter has complied with government requests to censor 52 tweets that mostly criticised...


Rajesh Kumar* doesn’t have many enemies in life. But, Uber, for which he drives a cab everyday, is starting to look like one, he...

MediaNama is the premier source of information and analysis on Technology Policy in India. More about MediaNama, and contact information, here.

© 2008-2021 Mixed Bag Media Pvt. Ltd. Developed By PixelVJ

Subscribe to our daily newsletter
Your email address:*
Please enter all required fields Click to hide
Correct invalid entries Click to hide

© 2008-2021 Mixed Bag Media Pvt. Ltd. Developed By PixelVJ