Request a callback

Glossary · DPDP Act 2023 · s. 2(z), s. 10

Significant Data Fiduciary

Definition

DPDP Act 2023 · s. 2(z), s. 10

A Data Fiduciary, or a class of them, that the Central Government notifies under s. 10 after weighing the volume and sensitivity of the data it handles, the risk to Data Principals, and wider interests such as electoral democracy and the security of the State. A Significant Data Fiduciary must appoint a Data Protection Officer based in India, engage an independent data auditor, and carry out periodic Data Protection Impact Assessments and audits. Rule 13 of the DPDP Rules 2025 makes the assessment and audit annual and adds due diligence on algorithmic software; the penalty for breaching s. 10 is up to Rs 150 crore.

"Significant Data Fiduciary" means any Data Fiduciary or class of Data Fiduciaries as may be notified by the Central Government under section 10.
Also called SDF
Read the source

Sources: DPDP Act 2023, s. 2(z) and s. 10; DPDP Rules 2025, Rule 13

In other laws

LawTermNote
GDPR (EU)No direct equivalentGDPR scales duties by the risk of the processing (DPIA under Art. 35, DPO under Art. 37) rather than by a government designation of the organisation.

Where it appears

s. 10

Additional obligations of Significant Data Fiduciary

Sch.

Penalty for breach of s. 10, up to Rs 150 crore

Related terms

Data FiduciaryData Protection OfficerAI system impact assessmentPersonal data

This page explains the law in plain English. It is not legal advice.