Lesson 2.3: The Data Principal

Module 2 · Lesson 2.3 of 6 · About 30 minutes · The Data Principal

Meet the person the law protects, including special cases for children and persons with disability. This DPDPA 2023 course page explains the data principal in plain language.

the data principal - DPDPA 2023 course lesson banner
Advertisement

What you will learn about the data principal

  • Define the Data Principal
  • Explain who acts for a child or a person with disability
  • State the duties of a Data Principal

Who is the Data Principal

The individual to whom the personal data relates. If the individual is a child, it includes the parent or lawful guardian. If the individual is a person with disability, it includes the lawful guardian acting on her behalf.

Rights at a glance: click each (the data principal)

Select a numbered box to read more.

1Right toinformation2Right tocorrection3Right toerasure4Grievanceredress5Right tonominate
Tap or click a step to see exactly what to do.
Advertisement

Duties of a Data Principal (Section 15)

DutyIn plain words
Comply with lawsFollow applicable law while exercising rights
No impersonationDo not pretend to be someone else when giving data
No suppression of material informationDo not hide facts when getting a document or ID
No false complaintsDo not file frivolous or false grievances
Furnish authentic informationGive verifiable and authentic details when asking for correction or erasure

Worked example (the data principal)

A person files ten repeated complaints with a fake identity. The Board can impose a penalty of up to Rs 10,000 for breach of Data Principal duties.

Activity (5 minutes)

Review your own privacy notice. Does it explain these rights in simple language?

Key takeaway: Rights come with duties. Build both into your processes so you can reject false requests with a clear reason.

Check your understanding of the data principal

Q1. Who acts for a child under the Act?

Q2. Which is a Data Principal duty?

Q3. Penalty for breach of Data Principal duties can be up to:

Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.

Official sources for the data principal: Digital Personal Data Protection Rules, 2025 (MeitY, PDF) and DPDP Rules 2025, English text (PDF). Always check the latest official notifications.