Rule 19 — Procedure for Meetings of Board and Authentication of Its Orders, Directions and Instruments

Rule 19 is the most detailed of the Board-administration rules, and the one with the clearest practical relevance to anyone who might actually face a Board inquiry — its final sub-rule fixes a timeline the Board itself has to work within.

19(1)–(2) — who calls and chairs a meeting

The Chairperson fixes the date, time and place of Board meetings, approves the agenda, and causes notice to be issued under her own signature or that of someone she's authorised in writing. She chairs meetings herself; in her absence, the Members present choose one of themselves to chair instead.

19(3)–(5) — quorum, voting and conflict-of-interest recusal

One-third of the Board's total membership constitutes quorum. Questions before a meeting are decided by majority vote of Members present and voting, with the Chairperson (or whoever is chairing in her absence) holding a casting vote if the votes are tied. A Member with an interest in a particular item of business must not participate in or vote on it — that item is then decided by majority vote of the other Members present and voting instead.

19(6)–(7) — emergency action and decisions by circulation

If an emergent situation calls for immediate action and calling a meeting isn't feasible, the Chairperson may act on her own, recording her reasons in writing, but has to communicate that action to all Members within seven days and put it before the Board for ratification at its next meeting. Separately, the Chairperson can direct that an item requiring Board decision be circulated to Members rather than taken up at a meeting, and it can be decided that way with majority approval.

19(8) — authenticating orders

The Chairperson, any Member, or anyone the Board authorises by general or special written order, may authenticate the Board's orders, directions or instruments under her own signature. This is the provision that gives a Board order its formal validity as an authenticated instrument.

19(9) — the six-month inquiry clock

An inquiry the Board conducts has to be completed within six months from the date it received the intimation, complaint, reference or direction that triggered it under Section 27 of the Act — unless the Board extends that period, recording its reasons in writing, for a further period not exceeding three months at a time. That's a renewable extension, not a hard cap at nine months, but each extension requires a fresh, written justification rather than an open-ended pause.

Why this matters in practice

For an organisation under Board inquiry, Rule 19(9) is the one sub-rule worth tracking actively — it sets an expectation for how long an inquiry should reasonably take, and a documented extension process if it runs longer. An inquiry that drags on well past six months with no recorded extension, or with extensions granted routinely rather than for genuine reasons, is itself something worth raising through the Board's own procedural channels rather than assuming indefinite delay is simply how the process works.

Illustration: a company receives a Board direction under Section 27 in January following a data-breach complaint. If the Board's inquiry hasn't concluded by July — six months later — it needs a written, reasoned extension of up to three months to continue past that point, and a further such extension for each additional three-month period, rather than continuing indefinitely on the original timeline.

How Rule 19 connects to the rest of the Rules and the Act

Rule 19(9)'s six-month clock runs from the trigger described in Section 27 of the Act — the Board's power to act on an intimation, complaint, reference or direction. Rule 20's requirement that the Board function as a digital office describes the mode in which these meetings, circulations and inquiries actually take place; Rule 19 describes the procedure, Rule 20 describes the medium.