DPDP Wiki Talk to us

/Glossary · Defined term

certain legitimate uses

Defined in section 2(d) of the Act.

Official definition

Official definition

Verbatim

Act, section 2(d)

(d) “certain legitimate uses” means the uses referred to in section 7;

Interpretation in plain English

Interpretation · not legal advice
Interpretation, not legal advice. This is a plain-English interpretation of the official text, prepared by the DPDP Wiki editorial team. It is not the law and not legal advice, and it may be incomplete or wrong. Always rely on the official text of the Act, the Rules and the notifications, and take advice from a qualified professional for your situation.
Data FiduciaryData Principal

The Digital Personal Data Protection Act, 2023 uses the phrase "certain legitimate uses" to describe specific situations where personal data may be processed. However, Section 2(d) does not actually list what these uses are. Instead, it defines the term simply by pointing the reader to another part of the law. It states that "certain legitimate uses" means the uses referred to in Section 7 of the Act.\n\nThis type of definition acts as a legal shortcut. Whenever the phrase "certain legitimate uses" appears anywhere else in the Act, it automatically carries the meaning and the specific list of situations detailed in Section 7. By structuring the definition this way, the law avoids repeating a long list of uses every time the concept is mentioned, relying entirely on Section 7 to set the actual boundaries and rules for these uses.

Key points

  • The term "certain legitimate uses" is defined strictly by referencing another section of the Act (Section 2(d)).
  • The actual uses that qualify under this term are located in Section 7 (Section 2(d)).

Common misreadings

  • Assuming Section 2(d) provides a general or open-ended definition of legitimate uses, when it actually restricts the meaning only to the specific uses listed in Section 7.

Interpretation prepared from the official text only, 9 September 2026. The official text above prevails.

/MYND · DPDP practice

Putting this into practice?

MYND runs DPDP compliance programmes for the data that flows through HR, payroll, finance and vendor operations: readiness assessments, consent and notice design, processor contracts and breach playbooks. Tell us what you are working on and a compliance lead will reply within one working day.

How we use these details: only to respond to you. Withdraw any time by writing to sales@myndsol.com. This form is protected against automated submissions.