30. What Section 23 does not provide
Section 23 does not itself:
-
define the Board’s substantive jurisdiction;
-
create inquiry or penalty powers;
-
eliminate quorum requirements during a vacancy;
-
validate jurisdictionally invalid acts;
-
cure procedural irregularities affecting the merits;
-
make every meeting physical;
-
require every proceeding to be entirely online;
-
allow the Chairperson to bypass the Board routinely;
-
make the senior-most Member permanent Chairperson;
-
require every order to be signed personally by the Chairperson;
-
invalidate every proceeding that exceeds six months;
-
permit an interested Member to participate without voting;
-
allow authentication authority to become decision-making authority.
Those matters must be resolved through the complete statutory and regulatory framework.
Conclusion
Section 23 establishes the institutional procedure through which the Data Protection Board conducts meetings, decides business and maintains continuity.
Rule 19 gives practical effect to the section by providing that:
-
the Chairperson fixes meeting details and approves the agenda;
-
the Chairperson ordinarily presides;
-
one-third of the membership constitutes quorum;
-
decisions are made by majority vote;
-
the presiding person has a casting vote in case of equality;
-
an interested Member must not participate or vote;
-
the Chairperson may take recorded emergency action subject to communication and ratification;
-
matters may be decided by circulation;
-
authorised persons may authenticate Board instruments;
-
inquiries should ordinarily conclude within six months, subject to reasoned extensions of up to three months at a time.
Section 23(2) prevents proceedings from being invalidated merely because of a vacancy, appointment defect or procedural irregularity that does not affect the merits. It does not cure material unfairness, absence of jurisdiction or non-compliance that affects the result.
Section 23(3) ensures continuity during the Chairperson’s temporary inability by authorising the senior-most Member to discharge the Chairperson’s functions until she resumes duty.
Rule 20 completes the framework by requiring the Board to function as a digital office while preserving its authority to compel attendance and examine persons on oath.
Key point
In substance, Section 23 combines collective decision-making, procedural continuity, conflict controls and digital operation while preserving the distinction between harmless procedural defects and failures that materially affect the merits of a proceeding.