[{"data":1,"prerenderedAt":249},["ShallowReactive",2],{"dpdp-\u002Fdpdp-act\u002Fglossary":3},{"id":4,"title":5,"author":6,"body":7,"category":222,"date":223,"description":224,"draft":225,"extension":226,"eyebrow":227,"faq":228,"h1":229,"keywords":230,"meta":234,"navigation":235,"ogTitle":236,"path":237,"readingTime":238,"relatedArticles":239,"relatedServices":241,"seo":244,"stem":245,"tags":246,"updated":247,"__hash__":248},"dpdp\u002Fdpdp-act\u002Fglossary.md","DPDP Act Glossary of Terms","DreamyHook Consultancy Services",{"type":8,"value":9,"toc":212},"minimark",[10,20,25,32,42,52,62,68,78,82,88,94,100,106,110,120,126,135,141,145,151,157,163,169,173,183,189,195,198,206],[11,12,13,14,19],"p",{},"The DPDP Act uses specific terms with precise meanings. Here they are in plain English. For the full picture, start with ",[15,16,18],"a",{"href":17},"\u002Fdpdp-act\u002Fwhat-is-dpdp-act","What is the DPDP Act?",".",[21,22,24],"h2",{"id":23},"core-roles","Core roles",[11,26,27,31],{},[28,29,30],"strong",{},"Data Principal"," — The individual whom the personal data is about. If it's a child, the parent or lawful guardian; if a person with disability, their lawful guardian.",[11,33,34,37,38,41],{},[28,35,36],{},"Data Fiduciary"," — The person or organization that, alone or with others, determines the ",[28,39,40],{},"purpose and means"," of processing personal data. Most businesses are Data Fiduciaries.",[11,43,44,47,48,51],{},[28,45,46],{},"Data Processor"," — Anyone who processes personal data ",[28,49,50],{},"on behalf of"," a Data Fiduciary (for example, a cloud host or analytics vendor).",[11,53,54,57,58,19],{},[28,55,56],{},"Significant Data Fiduciary (SDF)"," — A Data Fiduciary notified by the government as higher-risk, with extra duties. See ",[15,59,61],{"href":60},"\u002Fdpdp-act\u002Fsignificant-data-fiduciary","the SDF guide",[11,63,64,67],{},[28,65,66],{},"Consent Manager"," — A registered intermediary, accountable to the Data Principal, that provides a single interface to give, manage, review, and withdraw consent.",[11,69,70,73,74,19],{},[28,71,72],{},"Data Protection Officer (DPO)"," — The individual an SDF must appoint, based in India, as the point of contact for data-protection grievances. Available as a service via ",[15,75,77],{"href":76},"\u002Fservices\u002Fdpo-as-a-service","DPO-as-a-Service",[21,79,81],{"id":80},"data-processing","Data & processing",[11,83,84,87],{},[28,85,86],{},"Personal data"," — Any data about an individual who is identifiable by or in relation to such data.",[11,89,90,93],{},[28,91,92],{},"Digital personal data"," — Personal data in digital form — what the Act governs.",[11,95,96,99],{},[28,97,98],{},"Processing"," — Any operation on personal data: collection, storage, use, sharing, erasure, and more.",[11,101,102,105],{},[28,103,104],{},"Purpose"," — The specific reason for which personal data is processed, which must be lawful and stated to the Data Principal.",[21,107,109],{"id":108},"consent-notice","Consent & notice",[11,111,112,115,116,119],{},[28,113,114],{},"Consent"," — Agreement that is ",[28,117,118],{},"free, specific, informed, unconditional, and unambiguous",", given by a clear affirmative action, and limited to the stated purpose.",[11,121,122,125],{},[28,123,124],{},"Notice"," — The clear, itemized information a Data Fiduciary must give a Data Principal about what data is collected and why, and how to withdraw consent and complain.",[11,127,128,131,132,19],{},[28,129,130],{},"Withdrawal of consent"," — The right to take back consent, which must be ",[28,133,134],{},"as easy to do as it was to give",[11,136,137,140],{},[28,138,139],{},"Legitimate uses"," — Certain situations where personal data may be processed without fresh consent (for example, where a Data Principal has voluntarily provided data for a specified purpose, or for certain state functions).",[21,142,144],{"id":143},"rights-duties","Rights & duties",[11,146,147,150],{},[28,148,149],{},"Right to access"," — A Data Principal's right to a summary of their personal data and the recipients it's shared with.",[11,152,153,156],{},[28,154,155],{},"Right to correction and erasure"," — The right to have personal data corrected, completed, updated, or erased.",[11,158,159,162],{},[28,160,161],{},"Right to grievance redressal"," — The right to a readily available means of complaint.",[11,164,165,168],{},[28,166,167],{},"Right to nominate"," — The right to nominate another person to exercise one's rights in case of death or incapacity.",[21,170,172],{"id":171},"enforcement","Enforcement",[11,174,175,178,179,19],{},[28,176,177],{},"Data Protection Board of India"," — The independent regulator that investigates breaches and complaints and can impose ",[15,180,182],{"href":181},"\u002Fdpdp-act\u002Fpenalties","penalties",[11,184,185,188],{},[28,186,187],{},"Personal data breach"," — Any unauthorized processing, or accidental disclosure, acquisition, sharing, use, alteration, destruction, or loss of access to personal data, that compromises its confidentiality, integrity, or availability.",[11,190,191,194],{},[28,192,193],{},"Data Protection Impact Assessment (DPIA)"," — A structured assessment of the risks processing poses to Data Principals and the measures to manage them; required (annually) for SDFs.",[196,197],"hr",{},[11,199,200,201,205],{},"Not sure how these apply to your business? The free ",[15,202,204],{"href":203},"\u002Fquick-scan","DPDP Quick Scan"," translates the terms into your specific situation.",[207,208,209],"blockquote",{},[11,210,211],{},"General information, not legal advice. Definitions are simplified — confirm against the official Act.",{"title":213,"searchDepth":214,"depth":214,"links":215},"",3,[216,218,219,220,221],{"id":23,"depth":217,"text":24},2,{"id":80,"depth":217,"text":81},{"id":108,"depth":217,"text":109},{"id":143,"depth":217,"text":144},{"id":171,"depth":217,"text":172},"Reference","2026-03-15","A plain-English glossary of DPDP Act terms — Data Fiduciary, Data Principal, Consent Manager, SDF, and more, defined simply.",false,"md","Glossary",[],"DPDP Act glossary of terms",[231,232,233],"DPDP Act terms","DPDP glossary","DPDP definitions",{},true,null,"\u002Fdpdp-act\u002Fglossary","5 min read",[17,240],"\u002Fdpdp-act\u002Fdpdp-rules-2025",[242,243],"readiness-audit","consent-management",{"title":5,"description":224},"dpdp-act\u002Fglossary",[],"2026-05-20","oc5pzQ42c5eYcOQWJOud9DHARQ0cKNLTtszxlm74K-Q",1780230336150]