Data Controller
OPERATIONAL / EDITORIAL TERMA GDPR term equivalent in concept to a Data Fiduciary in the DPDP Act.
Data Fiduciary
STATUTORY / OFFICIAL TERMAny person who alone or in conjunction with other persons determines the purpose and means of processing of personal data.
Data Flow Map
OPERATIONAL / EDITORIAL TERMA visual or tabular representation of how personal data moves through an organizationΓÇÖs systems and to third parties.
Data Inventory
OPERATIONAL / EDITORIAL TERMA comprehensive record of the personal data an organization collects, processes, stores, and shares.
Data Minimisation
OPERATIONAL / EDITORIAL TERMThe practice of collecting only the personal data that is strictly necessary for a specified purpose.
Data Principal
STATUTORY / OFFICIAL TERMThe individual to whom the personal data relates.
Data Processing Agreement (DPA)
LEGALLY RELEVANT TERMA valid contract under which a Data Fiduciary engages a Data Processor to process personal data on its behalf.
Data Processor
STATUTORY / OFFICIAL TERMAny person who processes personal data on behalf of a Data Fiduciary.
Data Protection Officer (DPO)
STATUTORY / OFFICIAL TERMAn individual appointed by a Significant Data Fiduciary to represent them and ensure compliance under the Act.
Data Retention Schedule
OPERATIONAL / EDITORIAL TERMAn operational policy defining how long different categories of data are kept and when they are destroyed.
Data Subject
OPERATIONAL / EDITORIAL TERMA GDPR term often colloquially used to mean Data Principal, though not officially used in the DPDP Act.
Duty of Data Principal
STATUTORY / OFFICIAL TERMStatutory obligations imposed on individuals, such as the duty not to register false grievances or furnish false particulars.