/Glossary · Defined term
Data Principal
Defined in section 2(j) of the Act.
Act, section 2(j)
(j) “Data Principal” means the individual to whom the personal data relates and where such individual is— (i) a child, includes the parents or lawful guardian of such a child; (ii) a person with disability, includes her lawful guardian, acting on her behalf;
The term "Data Principal" refers to the specific individual that a piece of personal data is about. Under the law, whenever personal data is collected or processed, the human being connected to that data is recognized as the Data Principal. The law specifically expands this definition for individuals who may need assistance in exercising their legal rights. If the individual is a child, the term Data Principal automatically includes the child's parents or lawful guardian. Similarly, if the individual is a person with a disability, the definition includes their lawful guardian who is acting on their behalf. This structure ensures that parents and legal guardians have the authority to make decisions and act for the individuals they protect.
Key points
- A Data Principal is the individual to whom the personal data relates (Section 2(j)).
- For a child, the definition of Data Principal includes the child's parents or lawful guardian (Section 2(j)(i)).
- For a person with a disability, the definition includes their lawful guardian acting on their behalf (Section 2(j)(ii)).
Common misreadings
- A reader might assume that a child or a person with a disability is the only Data Principal for their own data, but the law explicitly includes their parents or lawful guardians within the definition itself.
Interpretation prepared from the official text only, 9 September 2026. The official text above prevails.
/MYND · DPDP practice
Putting this into practice?
MYND runs DPDP compliance programmes for the data that flows through HR, payroll, finance and vendor operations: readiness assessments, consent and notice design, processor contracts and breach playbooks. Tell us what you are working on and a compliance lead will reply within one working day.