---
title: "Section 15: Duties of Data Principal"
url: https://dpdp.myndsolution.com/wiki/act/section-15-duties-of-data-principal/
description: "Section 15 of the Digital Personal Data Protection Act, 2023 (Duties of Data Principal). Official text verbatim, comes into force on 13 may 2027, with…"
kind: act-section
updated: 2026-09-09
official_source: https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf
text_type: official-text-plus-interpretation
publisher: MYND Integrated Solutions
license: Official Government of India texts are reproduced verbatim (public domain / open government data). Interpretation is CC BY 4.0, MYND Integrated Solutions.
disclaimer: Not legal advice. Official text prevails over any interpretation.
html_version: https://dpdp.myndsolution.com/wiki/act/section-15-duties-of-data-principal/
---
# Section 15: Duties of Data Principal

*The Digital Personal Data Protection Act, 2023 (No. 22 of 2023), Chapter III: RIGHTS AND DUTIES OF DATA PRINCIPAL. Comes into force on 13 May 2027.*

## Official text

A Data Principal shall perform the following duties, namely:—
- **(a)** comply with the provisions of all applicable laws for the time being in force while exercising rights under the provisions of this Act;

- **(b)** to ensure not to impersonate another person while providing her personal data for a specified purpose;

- **(c)** to ensure not to suppress any material information while providing her personal data for any document, unique identifier, proof of identity or proof of address issued by the State or any of its instrumentalities;

- **(d)** to ensure not to register a false or frivolous grievance or complaint with a Data Fiduciary or the Board; and

- **(e)** to furnish only such information as is verifiably authentic, while exercising the right to correction or erasure under the provisions of this Act or the rules made thereunder.




## Interpretation in plain English (not legal advice)

> This is a plain-English interpretation of the official text, prepared by the DPDP Wiki editorial team. It is not the law and not legal advice, and it may be incomplete or wrong. Always rely on the official text of the Act, the Rules and the notifications, and take advice from a qualified professional for your situation.

Section 15 sets out the duties that a Data Principal (the individual to whom the personal data relates) must follow under the Act. First, when exercising any rights under this law, the Data Principal must comply with all other applicable laws currently in force.\n\nThe section also strictly prohibits certain deceptive actions. A Data Principal must not impersonate another person when providing personal data for a specific purpose. Additionally, when providing personal data for any State-issued document, unique identifier, or proof of identity or address, the Data Principal must not hide or suppress any material information.\n\nFinally, the law requires honesty in complaints and data requests. A Data Principal must not register a false or frivolous grievance or complaint with a Data Fiduciary (the entity determining the purpose and means of processing data) or the Board. When asking to correct or erase personal data, the Data Principal must only provide information that is verifiably authentic.

### Key points

- A Data Principal must comply with all applicable laws when exercising their rights under this Act (a).
- A Data Principal must not impersonate someone else when providing personal data for a specified purpose (b).
- A Data Principal must not suppress material information when providing data for State-issued IDs or documents (c).
- A Data Principal must not file false or frivolous complaints with a Data Fiduciary or the Board (d).
- A Data Principal must provide verifiably authentic information when requesting data correction or erasure (e).

### Common misreadings

- People might assume the Act only imposes obligations on organizations, but this section specifically places legal duties on the Data Principal.
- A Data Principal cannot demand correction or erasure using unverified information; the law requires the new information to be verifiably authentic.

*Interpretation prepared 2026-09-09 from the official text only; the official text prevails.*

---
Cite as: Digital Personal Data Protection Act, 2023, s. 15. Official source: https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf