Glossary
Every defined term, in plain English.
Definitions used across this site. Each entry points back to where the term is used, and where possible, to the statutory definition.
Educational only · not legal adviceLast updated: 17 August 2026Written and edited by Sandesh Kokate
- Data Fiduciary DPDP Section 2(i)
- The person or entity that alone or jointly decides the purpose and means of processing personal data. Analogous to 'controller' under GDPR.
- Data Principal DPDP Section 2(j)
- The individual whose personal data is being processed. Includes a child and their parents/guardians.
- Data Processor DPDP Section 2(k)
- A person who processes personal data on behalf of a Data Fiduciary.
- Significant Data Fiduciary DPDP Section 10
- A Data Fiduciary or class notified by the Central Government based on volume/sensitivity of data, risk, and impact.
- Consent Manager DPDP Section 6(7)–(9)
- A registered entity that lets a Data Principal give, manage, review, and withdraw consent through an interoperable platform.
- DPIA (Data Protection Impact Assessment) DPDP Section 10
- A structured review of processing operations to identify and mitigate risks to Data Principals.
- Data Protection Board DPDP Chapter V
- The sole enforcement authority under DPDP Act Chapter V. Investigates breaches, hears complaints, and can impose penalties up to ₹250 crore.
- Intermediary IT Act Section 2(1)(w)
- Any person who on behalf of another receives, stores, or transmits an electronic record — e.g., ISPs, hosts, search engines, social media.
- Safe harbour IT Act Section 79
- Conditional protection from liability for third-party content, contingent on the intermediary following due-diligence obligations.
- Notified General Clauses Act
- A rule that has been officially published in the Gazette — the point at which it can start to bind persons it applies to.
- In force vs Enforceable Editorial
- 'In force' means the law legally exists; 'enforceable' means the machinery to punish non-compliance is operational.
Missing a term? Check the Data Privacy hub or open an issue on our contact page.