Request a callback

Glossary · DPDP Act 2023 · s. 2(t)

Personal data

Definition

DPDP Act 2023 · s. 2(t)

Any data about an individual who can be identified by it or in relation to it. The test is identifiability, not sensitivity: a name, an email address, a device identifier or a combination of facts all count. The Act has no separate category of sensitive personal data; the same rules apply to all personal data in digital form.

"personal data" means any data about an individual who is identifiable by or in relation to such data.
Also called personal information (CCPA)personally identifiable information or PII (ISO 29100US usage)
Read the source

Sources: DPDP Act 2023, s. 2(t); GDPR, Art. 4(1); Cal. Civ. Code § 1798.140(v)

In other laws

LawTermNote
GDPR (EU)Personal data, Art. 4(1)A longer definition that lists identifiers; GDPR adds special categories (Art. 9) with stricter rules, which DPDP does not have.
CCPA / CPRA (California)Personal information, Cal. Civ. Code § 1798.140(v)Includes household information and inferences, and a separate sensitive personal information category, § 1798.140(ae).

Where it appears

s. 2(n)

Digital personal data: personal data in digital form

s. 3

Application of Act

Related terms

Digital personal dataProcessingData PrincipalPersonal data breach

This page explains the law in plain English. It is not legal advice.