Data Principal
Definition
The individual to whom the personal data relates. Equivalent to the data subject under GDPR. The DPDP Act grants data principals rights of access, correction, erasure, withdrawal of consent, nomination, and grievance redressal.
- Law
- India's Digital Personal Data Protection Act 2023
- GDPR equivalent
- Data subject
- Definition
- Individual to whom personal data relates
- Rights
- Access, correction, erasure, consent withdrawal, nomination, grievance redressal
Common questions
What does the 'nomination' right give a data principal that GDPR's data subject rights do not explicitly include?+
The DPDP Act allows a data principal to nominate another individual to exercise their rights in the event of death or incapacity, a feature not present as a standalone right under GDPR, which addresses succession and incapacity through different national legal mechanisms rather than a specific statutory nomination right.
Who exercises a data principal's rights when the principal is a minor?+
The DPDP Act requires parental or lawful guardian consent for processing a child's personal data and restricts certain processing, such as tracking or targeted advertising directed at children, so rights exercise for minors runs through the parent or guardian rather than the child directly.
Related terms
- Consent Notice
- A notice that must be provided to the data principal before or at the time of requesting consent. It must be clear,...
- Data Fiduciary
- The term used in India's Digital Personal Data Protection Act 2023 for an entity that determines the purpose and means of processing...
- Data Processor
- An entity that processes personal data on behalf of a data fiduciary, under the fiduciary's instructions. Equivalent to the data processor under...
- Data Protection Board of India (DPBI)
- The adjudicatory body established by the DPDP Act to receive complaints, investigate breaches of the Act, and impose penalties. The Board operates...
- Significant Data Fiduciary (SDF)
- A data fiduciary designated by the central government as carrying elevated risk based on data volume, sensitivity, national security considerations, or impact...