DPDP Statutory & Operational Glossary

The Telecom Disputes Settlement and Appellate Tribunal, which handles appeals against decisions of the Board.

The Data Protection Board of India established under section 18.

Specific scenarios under the Act where a Data Fiduciary may process personal data without explicit consent.

An individual who has not completed the age of eighteen years.

A person registered with the Board, who acts as a single point of contact to enable a Data Principal to give, manage, review and withdraw her consent.

Any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data.

The individual to whom the personal data relates.

Any person who processes personal data on behalf of a Data Fiduciary.

An individual appointed by a Significant Data Fiduciary to represent them and ensure compliance under the Act.

Statutory obligations imposed on individuals, such as the duty not to register false grievances or furnish false particulars.

Specific situations (e.g., state security, law enforcement) where certain provisions of the Act do not apply.

An individual appointed by a Data Fiduciary to answer questions and resolve grievances raised by Data Principals.

An entity appointed by a Significant Data Fiduciary to carry out data audits to evaluate compliance with the Act.

Information provided to a Data Principal before or at the time of requesting consent, detailing the data collected and its purpose.

Any data about an individual who is identifiable by or in relation to such data.

Any unauthorised processing of personal data or accidental disclosure, acquisition, sharing, use, alteration, destruction or loss of access to personal data.

A wholly or partly automated operation or set of operations performed on digital personal data.

Technical and organizational measures a Data Fiduciary must implement to protect personal data from breaches.

The right of a Data Principal to nominate another individual to exercise their rights in the event of death or incapacity.

A Data Fiduciary notified by the Central Government based on data volume, sensitivity, and risk to democracy or public order.

A private limited company, partnership, or LLP recognized under Government notifications, potentially eligible for certain exemptions.

The State as defined under article 12 of the Constitution of India.

A formal commitment accepted by the Board from a person facing action, promising to take specified actions to ensure compliance.