DPDP Glossary
Data Principal
The individual to whom the personal data relates.
Section 2(j)
What it means
Section 2(j) defines the Data Principal as the individual to whom the personal data relates. Where the Act deals with a child, references include the parent or lawful guardian acting in that context. Chapter III sets rights of access (Section 11), correction and erasure (Section 12), grievance redressal (Section 13) and nomination (Section 14). Section 15 duties constrain how rights are exercised — they are not additional rights.
Worked example
When a bank customer asks what personal data is being processed for their savings account, they act as Data Principal under Section 11. If they later nominate a spouse to exercise rights on incapacity, Section 14 is in play — that nominee exercises the Principal’s rights in the defined event, and is not automatically a Fiduciary for the bank’s processing.
In practice
Build request workflows for access, correction, erasure, grievances and nomination with verification, system reach and audit trails. Do not label Section 15 duties as “Principal rights” in policies or UI. Use the rights entries below for each Chapter III right in more depth.
Data Principal Rights Under DPDP →
- Right to access (Section 11)
- Right to correction and erasure (Section 12)
- Right of grievance redressal (Section 13)
- Right to nominate (Section 14)
Source
Section 2(j) · Official text (PDF)
Educational summary based on the Digital Personal Data Protection Act, 2023 and Rules, 2025. Not legal advice.