Request a callback

Glossary · DPDP Act 2023 · s. 2(l), s. 10(2)(a)

Data Protection Officer

Definition

DPDP Act 2023 · s. 2(l), s. 10(2)(a)

The individual a Significant Data Fiduciary must appoint to represent it under the Act. The DPO must be based in India, be responsible to the board of directors or a similar governing body, and be the point of contact for the grievance redressal mechanism. Other Data Fiduciaries need not appoint a DPO, but every fiduciary must publish the contact details of a person who can answer questions about its processing (s. 8(9)).

"Data Protection Officer" means an individual appointed by the Significant Data Fiduciary under clause (a) of sub-section (2) of section 10.
Also called DPO
Read the source

Sources: DPDP Act 2023, s. 2(l) and s. 10(2)(a); GDPR, Art. 37

In other laws

LawTermNote
GDPR (EU)Data protection officer, Arts. 37 to 39Mandatory for public authorities and for controllers whose core activities involve large-scale monitoring or special-category data, whatever their size; no requirement to be resident in the EU.

Where it appears

s. 8(9)

Publish contact details of the DPO or a person who can answer questions

s. 10(2)(a)

Significant Data Fiduciary to appoint a Data Protection Officer

Related terms

Significant Data FiduciaryGrievance redressalData FiduciaryPrivacy information management system (PIMS)

This page explains the law in plain English. It is not legal advice.