s.2 · s.11 · s.12 · s.13 · s.15
Data Principal
The Data Principal is the individual the personal data is about; for a child it includes the parent or lawful guardian, and for a person with disability it includes the lawful guardian.
Every right in Chapter III of the Act belongs to the Data Principal: access, correction and erasure, grievance redressal, and nomination. Every notice under Section 5 is written to the Data Principal, and every consent under Section 6 comes from one.
The Act also places duties on Data Principals. They must not impersonate anyone, must not suppress material information, and must not file frivolous complaints with the Board.
Questions people ask
- Is a company a Data Principal?
- No. A Data Principal is an individual. Data about a company is not personal data, though data about the people at that company is.
- Who is the Data Principal for a child?
- The child, and the definition brings in the parent or lawful guardian, which is who gives verifiable consent under Section 9.
Related terms
The DPDP brief
One email a month. What moved in the Act, and what our scans found.
Every claim cited to its section, the same way these pages are. No product news, no roundups of other people’s blogs.