Do you know?
The following are the key stakeholders under the Digital Personal Data Protection Act, 2023:
Data Principal – the individual to whom the personal data relates and where such individual is –
(i) a child, includes the parents or lawful guardian of such a child;
(ii) a person with disability, includes her lawful guardian, acting on her behalf;
Data Fiduciary – any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data;
Data Processor – any person who processes personal data on behalf of a Data Fiduciary;
Consent Manager – a person registered with the Board, who acts as a single point of contact to enable a Data Principal to give, manage, review and withdraw her consent through an accessible, transparent and interoperable platform;
Here, person includes –
(i) an individual;
(ii) a Hindu undivided family;
(iii) a company;
(iv) a firm;
(v) an association of persons or a body of individuals, whether incorporated or not;
(vi) the State; and
(vii) every artificial juristic person, not falling within any of the preceding sub-clauses;
Significant Data Fiduciary – The Central Government may notify any Data Fiduciary or class of Data Fiduciaries as Significant Data Fiduciary, on the basis of an assessment of such relevant factors as it may determine, including-
(a) the volume and sensitivity of personal data processed;
(b) risk to the rights of Data Principal;
(c) potential impact on the sovereignty and integrity of India;
(d) risk to electoral democracy;
(e) security of the State; and (f) public order.
