Lesson 2.3: The Data Principal
Meet the person the law protects, including special cases for children and persons with disability. This DPDPA 2023 course page explains the data principal in plain language.
What you will learn about the data principal
- Define the Data Principal
- Explain who acts for a child or a person with disability
- State the duties of a Data Principal
Who is the Data Principal
The individual to whom the personal data relates. If the individual is a child, it includes the parent or lawful guardian. If the individual is a person with disability, it includes the lawful guardian acting on her behalf.
Rights at a glance: click each (the data principal)
Select a numbered box to read more.
Duties of a Data Principal (Section 15)
| Duty | In plain words |
|---|---|
| Comply with laws | Follow applicable law while exercising rights |
| No impersonation | Do not pretend to be someone else when giving data |
| No suppression of material information | Do not hide facts when getting a document or ID |
| No false complaints | Do not file frivolous or false grievances |
| Furnish authentic information | Give verifiable and authentic details when asking for correction or erasure |
Worked example (the data principal)
A person files ten repeated complaints with a fake identity. The Board can impose a penalty of up to Rs 10,000 for breach of Data Principal duties.
Activity (5 minutes)
Review your own privacy notice. Does it explain these rights in simple language?
Check your understanding of the data principal
Q1. Who acts for a child under the Act?
Q2. Which is a Data Principal duty?
Q3. Penalty for breach of Data Principal duties can be up to:
Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.
