India Privacy Act Understand. Assess. Protect.
Plain-English terms

DPDP terminology, without the jargon.

The words the Act keeps coming back to — explained once, simply.

← Back home
Data Principal
The individual a piece of personal data is about.
Data Fiduciary
Whoever determines the purpose and means of processing personal data — most businesses sit here.
Data Processor
Anyone processing personal data on a Data Fiduciary's behalf.
Personal Data
Data about an individual who is identifiable by, or in relation to, that data.
Digital Personal Data
Personal data in digital form.
Processing
Any operation performed on digital personal data — collection, storage, retrieval, use, sharing, disclosure, erasure, and destruction.
Personal Data Breach
Unauthorised processing, or accidental disclosure, acquisition, sharing, use, alteration, destruction, or loss of access that compromises the confidentiality, integrity, or availability of personal data.
Consent Manager
A person registered with the Board who helps a Data Principal give, manage, review, and withdraw consent.
Significant Data Fiduciary
A Data Fiduciary, or class of Data Fiduciaries, notified by the Central Government under the Act. See Significant Data Fiduciaries.