Back to Glossary
Privacy Glossary

Data Principal

The individual to whom personal data relates, as defined under India's DPDP Act (equivalent to 'data subject' under GDPR).

DPDP Act

Full Definition

Under India's Digital Personal Data Protection Act 2023, the 'Data Principal' is the individual whose personal data is being processed. This is the Indian law equivalent of the 'Data Subject' under GDPR. Data Principals have rights under the DPDP Act including the right to access information about their data, the right to correction and erasure, the right to grievance redressal, and the right to nominate a representative. Data Principals can exercise these rights against the Data Fiduciary. Parental consent is required for processing data of children under 18.

Automate your privacy program

TruePrivacy handles DSRs, consent management, data mapping, and breach response — all in one platform.