/Glossary · Defined term
person
Defined in section 2(s) of the Act.
Act, section 2(s)
(s) “person” includes— (i) an individual; (ii) a Hindu undivided family; (iii) a company; (iv) a firm; (v) an association of persons or a body of individuals, whether incorporated or not; (vi) the State; and (vii) every artificial juristic person, not falling within any of the preceding sub-clauses;
The Digital Personal Data Protection Act uses the word person in a very broad way. It does not just mean a living human being. Under the Act, a person includes an individual, a company, a firm, or a Hindu undivided family. The definition also covers groups of people acting together, such as an association of persons or a body of individuals, regardless of whether they are officially incorporated. It specifically includes the State, meaning government bodies are treated as persons under the law. Finally, the definition acts as a catch-all by including every artificial juristic person that does not fit into the other categories. This ensures that any legally recognized entity, even if not explicitly listed, is still considered a person under the Act.
Key points
- A person includes a living individual as well as a Hindu undivided family [(i), (ii)].
- Companies, firms, and associations of persons are all considered persons, whether they are incorporated or not [(iii), (iv), (v)].
- The State is explicitly defined as a person [(vi)].
- Any other artificial juristic person not already listed is also covered by this definition [(vii)].
Common misreadings
- Assuming that the word person only refers to a living human being, when it actually includes companies, the State, and other legal entities.
- Believing that an association must be officially incorporated to be considered a person, when the text explicitly includes unincorporated bodies.
Interpretation prepared from the official text only, 9 September 2026. The official text above prevails.
/MYND · DPDP practice
Putting this into practice?
MYND runs DPDP compliance programmes for the data that flows through HR, payroll, finance and vendor operations: readiness assessments, consent and notice design, processor contracts and breach playbooks. Tell us what you are working on and a compliance lead will reply within one working day.