Section 2: Definitions

Section 2 provides definitions for all important terms in the Act. Key definitions include: • Data Principal: The individual whose personal data is being processed (includes parents/guardians for children or persons with disability). • Data Fiduciary: Any person or entity that decides why and how personal data is processed. • Data Processor: Any person who processes data on behalf of a Data Fiduciary. • Personal Data: Any data about an identifiable individual. • Digital Personal Data: Personal data in digital form. • Personal Data Breach: Unauthorized processing or accidental disclosure, loss, or destruction of personal data. • Processing: Any automated operation on digital personal data including collection, storage, use, sharing, erasure, etc. • Significant Data Fiduciary: A class of Data Fiduciaries notified by the Central Government based on volume, sensitivity, and risk factors. • Consent Manager: A registered entity that helps Data Principals manage their consent. • Child: An individual below 18 years of age.