Glossary · DPDP Act 2023 · s. 2(k)

Data Processor

Definition

DPDP Act 2023 · s. 2(k)

Anyone who processes personal data on behalf of a Data Fiduciary. A cloud host, a payroll vendor or an analytics provider is usually a Data Processor. The Act places its duties on the fiduciary, which may engage a processor only under a valid contract (s. 8(2)) and remains responsible for compliance whatever the contract says (s. 8(1)).

"Data Processor" means any person who processes personal data on behalf of a Data Fiduciary.

Also called processor (GDPR)service provider or contractor (CCPA)PII processor (ISO 27701)

Read the source

Sources: DPDP Act 2023, s. 2(k); GDPR, Art. 4(8)

In other laws

Law	Term	Note
GDPR (EU)	Processor, Art. 4(8)	GDPR puts direct duties on processors (Arts. 28, 30, 32 and 33); DPDP does not. The fiduciary answers for them.
CCPA / CPRA (California)	Service provider, Cal. Civ. Code § 1798.140(ag)	Bound by a written contract that limits use of the personal information to the business's purposes.

Where it appears

s. 8(1)

Data Fiduciary responsible for compliance, including processing by a Data Processor

s. 8(2)

A Data Processor may be engaged only under a valid contract

This page explains the law in plain English. It is not legal advice.

In other laws

Where it appears

Data Fiduciary responsible for compliance, including processing by a Data Processor

A Data Processor may be engaged only under a valid contract

Related terms