DPDP glossary
The vocabulary of India’s Digital Personal Data Protection Act, defined plainly.
DPDP Act
The Digital Personal Data Protection Act, 2023 is India's data protection law governing the processing of digital personal data, supported by the…
Data Processor
A Data Processor is a person who processes personal data on behalf of a Data Fiduciary, under contract and on that fiduciary's documented…
Data Principal
A Data Principal is the individual to whom personal data relates. Where the individual is a child it includes the parent or lawful guardian, and…
Consent
Under the DPDP Act, consent must be free, specific, informed, unconditional and unambiguous, given by a clear affirmative action, limited to the…
Notice
The information a Data Fiduciary must give a Data Principal when seeking consent — what personal data is sought, for what purpose, how to exercise…
RoPA
A Record of Processing Activities is the documented record of what an organisation does with personal data: each activity, its purpose, the…
Data Inventory
A record of where personal data lives across an organisation — which databases, object stores, SaaS applications and file shares hold it, and what…
PII
Personally identifiable information is any data that identifies an individual, directly or in combination with other data. The DPDP Act uses the term…
DPIA
A structured assessment of a processing activity that identifies the rights and risks involved for Data Principals and the measures taken to manage…
Grievance Redressal
The mechanism a Data Fiduciary must make readily available for Data Principals to raise complaints about the processing of their personal data, with…
Data Protection Board of India
The adjudicating body established by the DPDP Act. It inquires into personal data breaches and complaints, directs remedial measures, and imposes…
Third-Party Risk Management
The process of assessing and monitoring the processors and vendors that handle personal data on your behalf. Under the DPDP Act the Data Fiduciary…