--- title: "personal data: meaning under the DPDP Act" url: https://dpdp.myndsolution.com/wiki/glossary/personal-data/ description: "\"personal data\" as defined in section 2(t) of the DPDP Act, 2023: the official definition, its plain meaning, and where the term is used." kind: term updated: 2026-09-09 official_source: https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf text_type: official-text-plus-interpretation publisher: MYND Integrated Solutions license: Official Government of India texts are reproduced verbatim (public domain / open government data). Interpretation is CC BY 4.0, MYND Integrated Solutions. disclaimer: Not legal advice. Official text prevails over any interpretation. html_version: https://dpdp.myndsolution.com/wiki/glossary/personal-data/ --- # personal data ## Official definition **Act, s. 2(t):** (t) “personal data” means any data about an individual who is identifiable by or in relation to such data; ## Interpretation in plain English (not legal advice) > This is a plain-English interpretation of the official text, prepared by the DPDP Wiki editorial team. It is not the law and not legal advice, and it may be incomplete or wrong. Always rely on the official text of the Act, the Rules and the notifications, and take advice from a qualified professional for your situation. The Digital Personal Data Protection Act defines "personal data" as any data about an individual who can be identified by that data, or in relation to that data. This means the information must connect to a specific, identifiable human being to be considered personal data under the law. The definition is written broadly to capture different ways a person might be identified. It covers data that directly identifies someone on its own. It also covers data that can identify an individual when it is linked or evaluated "in relation to" other information. If a piece of data is completely anonymous and cannot be used to identify an individual, it does not meet this definition and is not considered personal data. ### Key points - Personal data must be about an individual. [Section 2(t)] - The individual must be identifiable by the data itself or in relation to the data. [Section 2(t)] ### Common misreadings - Assuming personal data only includes direct identifiers, when the text explicitly includes data where a person is identifiable "in relation to" such data. - Assuming data about a business or company is personal data, whereas the definition specifies it must be about an "individual". *Interpretation prepared 2026-09-09 from the official text only; the official text prevails.* ## Used in - [s. 1 Short title and commencement](https://dpdp.myndsolution.com/wiki/act/section-1-short-title-and-commencement/) - [s. 3 Application of Act](https://dpdp.myndsolution.com/wiki/act/section-3-application-of-act/) - [s. 4 Grounds for processing personal data](https://dpdp.myndsolution.com/wiki/act/section-4-grounds-for-processing-personal-data/) - [s. 5 Notice](https://dpdp.myndsolution.com/wiki/act/section-5-notice/) - [s. 6 Consent](https://dpdp.myndsolution.com/wiki/act/section-6-consent/) - [s. 7 Certain legitimate uses](https://dpdp.myndsolution.com/wiki/act/section-7-certain-legitimate-uses/) - [s. 8 General obligations of Data Fiduciary](https://dpdp.myndsolution.com/wiki/act/section-8-general-obligations-of-data-fiduciary/) - [s. 9 Processing of personal data of children](https://dpdp.myndsolution.com/wiki/act/section-9-processing-of-personal-data-of-children/) - [s. 10 Additional obligations of Significant Data Fiduciary](https://dpdp.myndsolution.com/wiki/act/section-10-additional-obligations-of-significant-data-fiduciary/) - [s. 11 Right to access information about personal data](https://dpdp.myndsolution.com/wiki/act/section-11-right-to-access-information-about-personal-data/) - [s. 12 Right to correction and erasure of personal data](https://dpdp.myndsolution.com/wiki/act/section-12-right-to-correction-and-erasure-of-personal-data/) - [s. 13 Right of grievance redressal](https://dpdp.myndsolution.com/wiki/act/section-13-right-of-grievance-redressal/) - [s. 15 Duties of Data Principal](https://dpdp.myndsolution.com/wiki/act/section-15-duties-of-data-principal/) - [s. 16 Processing of personal data outside India](https://dpdp.myndsolution.com/wiki/act/section-16-processing-of-personal-data-outside-india/) - [s. 17 Exemptions](https://dpdp.myndsolution.com/wiki/act/section-17-exemptions/) - [s. 27 Powers and functions of Board](https://dpdp.myndsolution.com/wiki/act/section-27-powers-and-functions-of-board/) - [s. 33 Penalties](https://dpdp.myndsolution.com/wiki/act/section-33-penalties/) - [s. 40 Power to make rules](https://dpdp.myndsolution.com/wiki/act/section-40-power-to-make-rules/) - [s. 44 Amendments to certain Acts](https://dpdp.myndsolution.com/wiki/act/section-44-amendments-to-certain-acts/) - [r. 1 Short title and commencement](https://dpdp.myndsolution.com/wiki/rules/rule-1-short-title-and-commencement/) - [r. 3 Notice given by Data Fiduciary to Data Principal](https://dpdp.myndsolution.com/wiki/rules/rule-3-notice-given-by-data-fiduciary-to-data-principal/) - [r. 5 Processing of personal data for provision or issue of subsidy, benefit, service, certificate, licence or permit by State and its instrumentalities](https://dpdp.myndsolution.com/wiki/rules/rule-5-processing-of-personal-data-for-provision-or-issue-of/) - [r. 6 Reasonable security safeguards](https://dpdp.myndsolution.com/wiki/rules/rule-6-reasonable-security-safeguards/) - [r. 7 Intimation of personal data breach](https://dpdp.myndsolution.com/wiki/rules/rule-7-intimation-of-personal-data-breach/) - [r. 8 Time period for specified purpose to be deemed as no longer being served](https://dpdp.myndsolution.com/wiki/rules/rule-8-time-period-for-specified-purpose-to-be-deemed-as-no-longer/) - [r. 9 Contact information of person to answer questions about processing](https://dpdp.myndsolution.com/wiki/rules/rule-9-contact-information-of-person-to-answer-questions-about/) - [r. 10 Verifiable consent for processing of personal data of child](https://dpdp.myndsolution.com/wiki/rules/rule-10-verifiable-consent-for-processing-of-personal-data-of-child/) - [r. 12 Exemptions from certain obligations applicable to processing of personal data of child](https://dpdp.myndsolution.com/wiki/rules/rule-12-exemptions-from-certain-obligations-applicable-to-processing/) - [r. 13 Additional obligations of Significant Data Fiduciary](https://dpdp.myndsolution.com/wiki/rules/rule-13-additional-obligations-of-significant-data-fiduciary/) - [r. 14 Rights of Data Principals](https://dpdp.myndsolution.com/wiki/rules/rule-14-rights-of-data-principals/) - [r. 15 Transfer of personal data outside the territory of India](https://dpdp.myndsolution.com/wiki/rules/rule-15-transfer-of-personal-data-outside-the-territory-of-india/) - [r. 16 Exemption from Act for research, archiving or statistical purposes](https://dpdp.myndsolution.com/wiki/rules/rule-16-exemption-from-act-for-research-archiving-or-statistical/)