DPDP Rules 2025 · Rule 2 · Group AIn force · 13 Nov 2025

Definitions

Status: In force
In force since: 13 Nov 2025Rule 1(2)
Penalty: No separate penalty
Binds: No direct duty on companies

In plain English

Defines four terms the Rules use and borrows every other definition from the Act. "User account" is wide: it includes profiles, pages, handles, email addresses and mobile numbers through which a person reaches your service, which matters for breach intimation under Rule 7 and erasure warnings under Rule 8. "Verifiable consent" means the parent or guardian consent process in Rules 10 and 11, and "techno-legal measures" refers to the digital-office provisions in Rules 20 and 22.

Gazette text · Rule 2In these rules, unless the context otherwise requires, –

(1)
In these rules, unless the context otherwise requires, –
1. (a)
  “Act” means the Digital Personal Data Protection Act, 2023 (22 of 2023);
2. (b)
  “techno-legal measures” means as referred to under rules 20 and 22;
3. (c)
  “user account” means the online account registered by the Data Principal with the Data Fiduciary, and includes any profiles, pages, handles, email address, mobile number and other similar presences by means of which such Data Principal is able to access the services of such Data Fiduciary; and
4. (d)
  “verifiable consent” means a consent as specified in rule 10 or 11.
(2)
The words and expressions used in these rules and not defined, but defined in the Act, shall have the same meanings respectively assigned to them in the Act.

Source: Gazette of India, G.S.R. 846(E), 13 Nov 2025 (MeitY copy)

Act sections and tools that apply

DPDP Act 2023, s. 2: DefinitionsGlossary: Data FiduciaryGlossary: Data Principal

Source: Gazette of India, G.S.R. 846(E), 13 Nov 2025 (MeitY copy) · Change log