---
title: "person: meaning under the DPDP Act"
url: https://dpdp.myndsolution.com/wiki/glossary/person/
description: "\"person\" as defined in section 2(s) of the DPDP Act, 2023: the official definition, its plain meaning, and where the term is used."
kind: term
updated: 2026-09-09
official_source: https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf
text_type: official-text-plus-interpretation
publisher: MYND Integrated Solutions
license: Official Government of India texts are reproduced verbatim (public domain / open government data). Interpretation is CC BY 4.0, MYND Integrated Solutions.
disclaimer: Not legal advice. Official text prevails over any interpretation.
html_version: https://dpdp.myndsolution.com/wiki/glossary/person/
---
# person

## Official definition

**Act, s. 2(s):** (s) “person” includes—
(i) an individual;
(ii) a Hindu undivided family;
(iii) a company;
(iv) a firm;
(v) an association of persons or a body of individuals, whether incorporated or not;
(vi) the State; and
(vii) every artificial juristic person, not falling within any of the preceding sub-clauses;


## Interpretation in plain English (not legal advice)

> This is a plain-English interpretation of the official text, prepared by the DPDP Wiki editorial team. It is not the law and not legal advice, and it may be incomplete or wrong. Always rely on the official text of the Act, the Rules and the notifications, and take advice from a qualified professional for your situation.

The Digital Personal Data Protection Act uses the word person in a very broad way. It does not just mean a living human being. Under the Act, a person includes an individual, a company, a firm, or a Hindu undivided family. The definition also covers groups of people acting together, such as an association of persons or a body of individuals, regardless of whether they are officially incorporated. It specifically includes the State, meaning government bodies are treated as persons under the law. Finally, the definition acts as a catch-all by including every artificial juristic person that does not fit into the other categories. This ensures that any legally recognized entity, even if not explicitly listed, is still considered a person under the Act.

### Key points

- A person includes a living individual as well as a Hindu undivided family [(i), (ii)].
- Companies, firms, and associations of persons are all considered persons, whether they are incorporated or not [(iii), (iv), (v)].
- The State is explicitly defined as a person [(vi)].
- Any other artificial juristic person not already listed is also covered by this definition [(vii)].

### Common misreadings

- Assuming that the word person only refers to a living human being, when it actually includes companies, the State, and other legal entities.
- Believing that an association must be officially incorporated to be considered a person, when the text explicitly includes unincorporated bodies.

*Interpretation prepared 2026-09-09 from the official text only; the official text prevails.*

## Used in

- [s. 1 Short title and commencement](https://dpdp.myndsolution.com/wiki/act/section-1-short-title-and-commencement/)
- [s. 3 Application of Act](https://dpdp.myndsolution.com/wiki/act/section-3-application-of-act/)
- [s. 4 Grounds for processing personal data](https://dpdp.myndsolution.com/wiki/act/section-4-grounds-for-processing-personal-data/)
- [s. 5 Notice](https://dpdp.myndsolution.com/wiki/act/section-5-notice/)
- [s. 6 Consent](https://dpdp.myndsolution.com/wiki/act/section-6-consent/)
- [s. 7 Certain legitimate uses](https://dpdp.myndsolution.com/wiki/act/section-7-certain-legitimate-uses/)
- [s. 8 General obligations of Data Fiduciary](https://dpdp.myndsolution.com/wiki/act/section-8-general-obligations-of-data-fiduciary/)
- [s. 9 Processing of personal data of children](https://dpdp.myndsolution.com/wiki/act/section-9-processing-of-personal-data-of-children/)
- [s. 10 Additional obligations of Significant Data Fiduciary](https://dpdp.myndsolution.com/wiki/act/section-10-additional-obligations-of-significant-data-fiduciary/)
- [s. 11 Right to access information about personal data](https://dpdp.myndsolution.com/wiki/act/section-11-right-to-access-information-about-personal-data/)
- [s. 12 Right to correction and erasure of personal data](https://dpdp.myndsolution.com/wiki/act/section-12-right-to-correction-and-erasure-of-personal-data/)
- [s. 13 Right of grievance redressal](https://dpdp.myndsolution.com/wiki/act/section-13-right-of-grievance-redressal/)
- [s. 15 Duties of Data Principal](https://dpdp.myndsolution.com/wiki/act/section-15-duties-of-data-principal/)
- [s. 16 Processing of personal data outside India](https://dpdp.myndsolution.com/wiki/act/section-16-processing-of-personal-data-outside-india/)
- [s. 17 Exemptions](https://dpdp.myndsolution.com/wiki/act/section-17-exemptions/)
- [s. 19 Composition and qualifications for appointment of Chairperson and Members](https://dpdp.myndsolution.com/wiki/act/section-19-composition-and-qualifications-for-appointment-of-chairperson-and-members/)
- [s. 21 Disqualifications for appointment and continuation as Chairperson and Members of Board](https://dpdp.myndsolution.com/wiki/act/section-21-disqualifications-for-appointment-and-continuation-as-chairperson-and-members-of-board/)
- [s. 23 Proceedings of Board](https://dpdp.myndsolution.com/wiki/act/section-23-proceedings-of-board/)
- [s. 27 Powers and functions of Board](https://dpdp.myndsolution.com/wiki/act/section-27-powers-and-functions-of-board/)
- [s. 28 Procedure to be followed by Board](https://dpdp.myndsolution.com/wiki/act/section-28-procedure-to-be-followed-by-board/)
- [s. 29 Appeal to Appellate Tribunal](https://dpdp.myndsolution.com/wiki/act/section-29-appeal-to-appellate-tribunal/)
- [s. 32 Voluntary undertaking](https://dpdp.myndsolution.com/wiki/act/section-32-voluntary-undertaking/)
- [s. 33 Penalties](https://dpdp.myndsolution.com/wiki/act/section-33-penalties/)
- [s. 40 Power to make rules](https://dpdp.myndsolution.com/wiki/act/section-40-power-to-make-rules/)
- [s. 44 Amendments to certain Acts](https://dpdp.myndsolution.com/wiki/act/section-44-amendments-to-certain-acts/)
- [r. 1 Short title and commencement](https://dpdp.myndsolution.com/wiki/rules/rule-1-short-title-and-commencement/)
- [r. 3 Notice given by Data Fiduciary to Data Principal](https://dpdp.myndsolution.com/wiki/rules/rule-3-notice-given-by-data-fiduciary-to-data-principal/)
- [r. 4 Registration and obligations of Consent Manager](https://dpdp.myndsolution.com/wiki/rules/rule-4-registration-and-obligations-of-consent-manager/)
- [r. 5 Processing of personal data for provision or issue of subsidy, benefit, service, certificate, licence or permit by State and its instrumentalities](https://dpdp.myndsolution.com/wiki/rules/rule-5-processing-of-personal-data-for-provision-or-issue-of/)
- [r. 6 Reasonable security safeguards](https://dpdp.myndsolution.com/wiki/rules/rule-6-reasonable-security-safeguards/)
- [r. 7 Intimation of personal data breach](https://dpdp.myndsolution.com/wiki/rules/rule-7-intimation-of-personal-data-breach/)
- [r. 8 Time period for specified purpose to be deemed as no longer being served](https://dpdp.myndsolution.com/wiki/rules/rule-8-time-period-for-specified-purpose-to-be-deemed-as-no-longer/)
- [r. 9 Contact information of person to answer questions about processing](https://dpdp.myndsolution.com/wiki/rules/rule-9-contact-information-of-person-to-answer-questions-about/)
- [r. 10 Verifiable consent for processing of personal data of child](https://dpdp.myndsolution.com/wiki/rules/rule-10-verifiable-consent-for-processing-of-personal-data-of-child/)
- [r. 11 Verifiable consent for processing of personal data of person with disability who has lawful guardian](https://dpdp.myndsolution.com/wiki/rules/rule-11-verifiable-consent-for-processing-of-personal-data-of-person/)
- [r. 12 Exemptions from certain obligations applicable to processing of personal data of child](https://dpdp.myndsolution.com/wiki/rules/rule-12-exemptions-from-certain-obligations-applicable-to-processing/)
- [r. 13 Additional obligations of Significant Data Fiduciary](https://dpdp.myndsolution.com/wiki/rules/rule-13-additional-obligations-of-significant-data-fiduciary/)
- [r. 14 Rights of Data Principals](https://dpdp.myndsolution.com/wiki/rules/rule-14-rights-of-data-principals/)
- [r. 15 Transfer of personal data outside the territory of India](https://dpdp.myndsolution.com/wiki/rules/rule-15-transfer-of-personal-data-outside-the-territory-of-india/)
- [r. 16 Exemption from Act for research, archiving or statistical purposes](https://dpdp.myndsolution.com/wiki/rules/rule-16-exemption-from-act-for-research-archiving-or-statistical/)
- [r. 19 Procedure for meetings of Board and authentication of its orders, directions and instruments](https://dpdp.myndsolution.com/wiki/rules/rule-19-procedure-for-meetings-of-board-and-authentication-of-its/)
- [r. 20 Functioning of Board as digital office](https://dpdp.myndsolution.com/wiki/rules/rule-20-functioning-of-board-as-digital-office/)
- [r. 22 Appeal to Appellate Tribunal](https://dpdp.myndsolution.com/wiki/rules/rule-22-appeal-to-appellate-tribunal/)
- [r. 23 Calling for information from Data Fiduciary or intermediary](https://dpdp.myndsolution.com/wiki/rules/rule-23-calling-for-information-from-data-fiduciary-or-intermediary/)