DPO Appointment Letter Template

[Organization Letterhead]

Date: [DD-MM-YYYY]

Subject: Appointment as Data Protection Officer

To,
[DPO Name]
[Designation / Address]

Dear [DPO Name],

We are pleased to confirm your appointment as the Data Protection Officer ("DPO") of [Organization Name], effective [DD-MM-YYYY].

1. BASIS OF APPOINTMENT

This appointment is made in furtherance of [Organization Name]'s obligations under the Digital Personal Data Protection Act, 2023, including, where applicable to us as a Significant Data Fiduciary, the requirement under Section 10 to appoint a Data Protection Officer based in India who shall represent [Organization Name] for matters relating to the Act.

2. REPORTING LINE

You shall report directly to [Board of Directors / Managing Director / designated Committee], to ensure your function retains the independence necessary to discharge your responsibilities objectively.

3. MANDATE AND RESPONSIBILITIES

Your responsibilities shall include, but are not limited to:
(a) Serving as the point of contact for Data Principals for the purpose of grievance redressal under Section 13.
(b) Serving as the point of contact for the Data Protection Board of India on matters relating to the Act.
(c) Overseeing the maintenance of the Record of Processing Activities, Data Breach Log, and Rights Request Log.
(d) Advising on and reviewing Data Protection Impact Assessments for high-risk or significant processing activities.
(e) Overseeing breach intimation processes under Section 8(6), including timely notification to the Board and affected Data Principals.
(f) Coordinating, where applicable, the annual DPIA and independent audit required of a Significant Data Fiduciary under Section 10.
(g) Reviewing and approving consent notices, privacy notices, and related disclosures for compliance with Sections 5 and 6.
(h) Publishing and keeping current your business contact information as required under the Act.

4. AUTHORITY

You are authorized to:
(a) Request information from any department or function necessary to discharge the above responsibilities.
(b) Halt or flag a processing activity pending review where you assess a material compliance risk, subject to escalation to [Board / Committee] where the activity is business-critical.
(c) Engage external counsel or auditors, within approved budget, for independent assessments.

5. RESOURCES

[Organization Name] shall provide you with the personnel, budget, and access necessary to carry out this mandate, to be reviewed [annually] as part of the budgeting cycle.

6. TERM

This appointment continues until revoked in writing or until a successor is appointed, whichever is earlier. Your business contact details for publication are:

Name: [DPO Name]
Email: [Email]
Phone: [Phone]
Postal Address: [Address]

Please countersign below to confirm your acceptance of this appointment and its terms.

For [Organization Name]:
[Authorized Signatory Name]
[Designation]

Accepted:
[DPO Name]
Date: [DD-MM-YYYY]