BACK TO DPDP ACT
DPDP Act 2023

Section 34

Board to be Guided by Central Government

THE STATUTE

Original Text

(1) The Board shall, in the discharge of its functions, be guided by such directions on questions of policy as the Central Government may give in writing from time to time. (2) The decision of the Central Government on whether a question is one of policy or not shall be final.

Simplified

Section 34 is the DPDP Act's most constitutionally controversial provision — and the one most directly in tension with the right to privacy established in Puttaswamy (2017). It requires the Data Protection Board to be 'guided by such directions on questions of policy as the Central Government may give in writing'. More significantly, Section 34(2) makes the government's determination of what constitutes a 'policy question' final — meaning the government self-defines the scope of its own power to direct the regulator. This is a structural independence problem of the first order. GDPR's Article 52 requires supervisory authorities to 'act with complete independence in performing their tasks and exercising their powers'. The DPDP Act's Board has no such statutory independence guarantee. If the Central Government — which is both a major Data Fiduciary through its vast data processing operations and the entity responsible for the broad Section 17(1)(a) surveillance exemptions — can direct the Board on policy questions and self-certify what counts as policy, the Board's ability to enforce the Act against government data processing is structurally compromised. Critics including the Internet Freedom Foundation, civil society organizations, and privacy scholars have argued that Section 34 effectively makes the Board an instrument of the executive rather than an independent data protection authority. The government's counterargument is that all regulatory bodies in India operate under policy direction from the parent ministry, and the DPDP Board is no different from SEBI, TRAI, or other regulators that receive policy guidance without losing adjudicatory independence. Whether this argument holds in the specific context of a body meant to protect privacy against government surveillance is the central unresolved constitutional tension of the DPDP Act.

Common Queries

Section 34 allows the government to give 'policy directions' — not specific adjudicatory directions. In principle, directing the Board to close a specific case would be a judicial interference. However, 'policy' is self-defined by the government under Section 34(2), creating ambiguity about the boundary.
Not fully. The Board lacks statutory independence guarantees. Government controls appointments, can give policy directions, defines what counts as policy, and is itself a major Data Fiduciary exempt from large parts of the Act. Independence concerns are a central criticism of the DPDP Act.
Yes — a constitutional challenge under Articles 21 and 14, read with the Puttaswamy judgment's privacy and proportionality standards, is likely. The argument would be that a regulator so controlled by the government cannot meaningfully protect the fundamental right to privacy.

Legal Context

Section 34 was one of the most debated provisions during Parliamentary consideration. The Srikrishna Committee in 2018 had recommended a fully independent Data Protection Authority. The Opposition parties in both Houses of Parliament raised the independence concern. The final Act retained government policy direction — a choice that will likely face constitutional challenge under the Puttaswamy proportionality standard.

Key Rules & Provisions

Government policy direction over Board — structural independence compromise.

Government self-defines scope of 'policy' — Section 34(2) is final on this question.

No statutory independence guarantee — unlike GDPR Article 52.

Expected constitutional challenge under Puttaswamy proportionality standard.

Related Case Laws

K.S. Puttaswamy v. Union of India (2017)

(2017) 10 SCC 1
RELEVANCE

The proportionality, necessity, and least-restrictive-means standards from Puttaswamy are the constitutional benchmark against which Section 34's government control over the Board will be tested — particularly regarding enforcement against state surveillance.