Data Principal
The individual to whom personal data relates, with specified inclusions for a child or a person with disability.
Pinpoint and official source
Act s. 2(j)
PLAIN WORDS, CLOSE SOURCES
Words worth getting exactly right.
Definitions and duties can have different commencement dates. Each card shows the status of the provision it cites.
18 terms
Data Fiduciary
A person who alone or with others determines the purpose and means of processing personal data.
Pinpoint and official source
Act s. 2(i)
Data Processor
A person who processes personal data on behalf of a Data Fiduciary.
Pinpoint and official source
Act s. 2(k)
Personal data
Data about an individual who is identifiable by or in relation to that data.
Pinpoint and official source
Act s. 2(t)
Processing
Wholly or partly automated operations performed on digital personal data, including collection, use, sharing and erasure.
Pinpoint and official source
Act s. 2(x)
Specified purpose
The purpose mentioned in the notice given under Act section 5.
Pinpoint and official source
Act s. 2(za)
Consent
A free, specific, informed, unconditional and unambiguous agreement signalled by clear affirmative action for a specified purpose.
Pinpoint and official source
Act s. 6(1)
Consent Manager — definition
The operative Act definition describes a person registered with the Board who acts as a single point of contact for a Data Principal to manage consent.
Pinpoint and official source
Act s. 2(g); G.S.R. 843(E)
Consent Manager — registration
The registration route, conditions and accountability framework start with Act section 6(9), Rule 4 and the First Schedule.
Pinpoint and official source
Act s. 6(9); Rule 4 and First Schedule
Notice
Information accompanying or preceding a consent request about the personal data, purpose and relevant routes.
Withdrawal
The ability to withdraw consent with ease comparable to giving it, subject to consequences and cessation rules.
Pinpoint and official source
Act s. 6(4)–(6)
Grievance redressal
The Data Fiduciary’s mechanism for a Data Principal to raise and have a grievance addressed.
Pinpoint and official source
Act ss. 8(10) and 13; Rule 14(3)
Significant Data Fiduciary — definition
The operative Act definition means a Data Fiduciary or class designated by the Central Government under section 10.
Pinpoint and official source
Act s. 2(z); G.S.R. 843(E)
SDF — additional duties
The DPO, audit, DPIA and technical due-diligence duties for a designated SDF are notified for future commencement.
Pinpoint and official source
Act s. 10; Rule 13
Verifiable consent
Consent designed under Rule 10 for a parent or Rule 11 for a lawful guardian of a person with disability.
Pinpoint and official source
Rules 2(d), 10 and 11
Erasure
Deletion connected to withdrawal, purpose, rights requests and any retention required by other law.
Pinpoint and official source
Act ss. 8(7) and 12(3)
Personal data breach
Unauthorised processing or accidental events that compromise confidentiality, integrity or availability of personal data.
Pinpoint and official source
Act s. 2(u)
DPO
For an SDF, an India-based individual responsible to its governing body who is the contact point for grievance redressal.
Pinpoint and official source
Act s. 10(2)(a)
No matching field note.
Try “consent”, “rights”, “breach” or “processor”.