Definitions
2. (1) In these rules, unless the context otherwise requires, ΓÇô
(a) "Act" means the Digital Personal Data Protection Act, 2023 (22 of 2023);
(b) "techno-legal measures" means as referred to under rules 20 and 22;
(c) "user account" means the online account registered by the Data Principal with the Data Fiduciary, and includes any profiles, pages, handles, email address, mobile number and other similar presences by means of which such Data Principal is able to access the services of such Data Fiduciary; and
(d) "verifiable consent" means a consent as specified in rule 10 or 11.
What this means: Clarifies that "User Account" is a broad term. It doesn't just mean a username and password; it legally includes your social media handle, mobile number, or email address used to access a service.
Key Practical Takeaways for Compliance Teams
-
•
Delegated Specificity: This rule provides concrete operational criteria that must be reflected in technical architectures and compliance records.
-
•
Audit Readiness: Ensure written SOPs, consent logs, and security controls correspond directly to the statutory wording of Rule 2.
-
•
Statutory Traceability: In any legal interpretation, the exact Gazette text above takes precedence over internal summaries.