--- title: "processing: meaning under the DPDP Act" url: https://dpdp.myndsolution.com/wiki/glossary/processing/ description: "\"processing\" as defined in section 2(x) of the DPDP Act, 2023: the official definition, its plain meaning, and where the term is used." kind: term updated: 2026-09-09 official_source: https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf text_type: official-text-plus-interpretation publisher: MYND Integrated Solutions license: Official Government of India texts are reproduced verbatim (public domain / open government data). Interpretation is CC BY 4.0, MYND Integrated Solutions. disclaimer: Not legal advice. Official text prevails over any interpretation. html_version: https://dpdp.myndsolution.com/wiki/glossary/processing/ --- # processing ## Official definition **Act, s. 2(x):** (x) “processing” in relation to personal data, means a wholly or partly automated operation or set of operations performed on digital personal data, and includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction; ## Interpretation in plain English (not legal advice) > This is a plain-English interpretation of the official text, prepared by the DPDP Wiki editorial team. It is not the law and not legal advice, and it may be incomplete or wrong. Always rely on the official text of the Act, the Rules and the notifications, and take advice from a qualified professional for your situation. The term processing covers almost anything that can be done to digital personal data. Under the law, it means any operation or set of operations performed on this data, as long as the action is wholly or partly automated. This means that if a process involves digital automation at any step, it falls under this definition. The law provides a long list of examples to show how broad this term is. Processing includes the very first steps of handling data, such as collection, recording, organisation, and storage. It also covers how data is used and managed day-to-day, including structuring, adaptation, retrieval, use, alignment, combination, and indexing. Finally, the definition covers how data is shared or disposed of. Sharing, disclosure by transmission, dissemination, or otherwise making the data available all count as processing. Even the acts of restricting, erasing, or destroying digital personal data are explicitly defined as processing. Because the text says processing includes operations such as these, the list is not exhaustive, meaning other similar automated actions are also covered. ### Key points - Processing means any operation or set of operations performed on digital personal data. (Section 2(x)) - The operation must be wholly or partly automated to qualify as processing. (Section 2(x)) - The definition includes early-stage actions like collection, recording, and storage. (Section 2(x)) - It also covers later-stage actions like sharing, disclosure, erasure, and destruction. (Section 2(x)) - The list of actions is not exhaustive, as it states processing includes operations such as the ones listed. (Section 2(x)) ### Common misreadings - A reader might think processing only means analyzing or changing data, but the definition explicitly includes simply collecting, storing, or erasing it. - A reader might assume entirely manual paper records are included, but the text specifies the operation must be wholly or partly automated and performed on digital personal data. *Interpretation prepared 2026-09-09 from the official text only; the official text prevails.* ## Used in - [s. 3 Application of Act](https://dpdp.myndsolution.com/wiki/act/section-3-application-of-act/) - [s. 5 Notice](https://dpdp.myndsolution.com/wiki/act/section-5-notice/) - [s. 6 Consent](https://dpdp.myndsolution.com/wiki/act/section-6-consent/) - [s. 7 Certain legitimate uses](https://dpdp.myndsolution.com/wiki/act/section-7-certain-legitimate-uses/) - [s. 8 General obligations of Data Fiduciary](https://dpdp.myndsolution.com/wiki/act/section-8-general-obligations-of-data-fiduciary/) - [s. 9 Processing of personal data of children](https://dpdp.myndsolution.com/wiki/act/section-9-processing-of-personal-data-of-children/) - [s. 10 Additional obligations of Significant Data Fiduciary](https://dpdp.myndsolution.com/wiki/act/section-10-additional-obligations-of-significant-data-fiduciary/) - [s. 11 Right to access information about personal data](https://dpdp.myndsolution.com/wiki/act/section-11-right-to-access-information-about-personal-data/) - [s. 12 Right to correction and erasure of personal data](https://dpdp.myndsolution.com/wiki/act/section-12-right-to-correction-and-erasure-of-personal-data/) - [s. 16 Processing of personal data outside India](https://dpdp.myndsolution.com/wiki/act/section-16-processing-of-personal-data-outside-india/) - [s. 17 Exemptions](https://dpdp.myndsolution.com/wiki/act/section-17-exemptions/) - [s. 40 Power to make rules](https://dpdp.myndsolution.com/wiki/act/section-40-power-to-make-rules/) - [r. 3 Notice given by Data Fiduciary to Data Principal](https://dpdp.myndsolution.com/wiki/rules/rule-3-notice-given-by-data-fiduciary-to-data-principal/) - [r. 5 Processing of personal data for provision or issue of subsidy, benefit, service, certificate, licence or permit by State and its instrumentalities](https://dpdp.myndsolution.com/wiki/rules/rule-5-processing-of-personal-data-for-provision-or-issue-of/) - [r. 6 Reasonable security safeguards](https://dpdp.myndsolution.com/wiki/rules/rule-6-reasonable-security-safeguards/) - [r. 8 Time period for specified purpose to be deemed as no longer being served](https://dpdp.myndsolution.com/wiki/rules/rule-8-time-period-for-specified-purpose-to-be-deemed-as-no-longer/) - [r. 9 Contact information of person to answer questions about processing](https://dpdp.myndsolution.com/wiki/rules/rule-9-contact-information-of-person-to-answer-questions-about/) - [r. 10 Verifiable consent for processing of personal data of child](https://dpdp.myndsolution.com/wiki/rules/rule-10-verifiable-consent-for-processing-of-personal-data-of-child/) - [r. 12 Exemptions from certain obligations applicable to processing of personal data of child](https://dpdp.myndsolution.com/wiki/rules/rule-12-exemptions-from-certain-obligations-applicable-to-processing/) - [r. 14 Rights of Data Principals](https://dpdp.myndsolution.com/wiki/rules/rule-14-rights-of-data-principals/) - [r. 16 Exemption from Act for research, archiving or statistical purposes](https://dpdp.myndsolution.com/wiki/rules/rule-16-exemption-from-act-for-research-archiving-or-statistical/)