22. What Section 19 does not prescribe
Section 19 does not itself prescribe:
-
a permanently fixed number of Members;
-
a minimum academic degree;
-
a fixed number of years of experience;
-
mandatory judicial experience;
-
mandatory privacy certification;
-
a compulsory technology expert;
-
a compulsory consumer representative;
-
a compulsory industry representative;
-
gender or sectoral quotas;
-
tenure;
-
salary;
-
retirement age;
-
quorum;
-
removal procedure;
-
adjudicatory procedure.
Those matters are either governed by other provisions or left to the appointment framework within the limits of the Act.
Conclusion
Section 19 gives the Data Protection Board its membership structure and professional character.
The Board consists of:
The present Government implementation contemplates one Chairperson and four other Members, although the wording of G.S.R. 845(E), which states that the Board shall consist of four members, should be read carefully alongside Section 19(1), Section 2(q) and the subsequent recruitment material.
All appointments are made by the Central Government through the Search-cum-Selection Committee framework prescribed in Rule 17. The Committees recommend candidates; the Central Government evaluates their suitability and makes the formal appointment.
Every Chairperson and Member must possess:
The eligible fields include legal, technological, regulatory, administrative, consumer-protection, dispute-resolution and digital-economy expertise. The list remains open to another field that the Central Government considers useful.
At least one person on the Board must be an expert in law. That person need not necessarily be the Chairperson, and the Act permits more than one legal expert.
Key point
In substance, Section 19 creates a centrally appointed, multidisciplinary Board whose Members must combine personal suitability with relevant expertise, while guaranteeing that legal expertise is represented within its composition.