Data principal

Polity & Governance glossary

Topic: Transparency, Accountability and e-Governance · NCERT: Beyond NCERT

Meaning

A data principal is the person the personal data is about. The term comes from the DPDP Act 2023. The data principal has rights:

  • information about how their data is used;
  • correction and erasure of the data;
  • grievance redress, which means getting a complaint dealt with;
  • nomination, which means naming someone to act for them.

The data principal also has duties, such as not filing false complaints. Breaking these duties can bring a fine of up to ₹10,000. For a child (under 18), the fiduciary needs verifiable parental consent. Tracking children and showing them targeted ads is banned.

Example

A student signs up on a shopping app. The student is the data principal and can ask the app to correct a wrong address or delete their account data. If the student were 15, the app would need a parent's verified consent.

Don't confuse with

  • Data fiduciary: this is the company or body that decides how the data is processed. The data principal is the person the data is about.

Related concepts

Read more