What is a data principal? Your role under DPDP.
Data principal explained simply: what the DPDP term means for you as an Indian user, the rights it gives you, and how to use them.
The simple answer
Under the DPDP Act, the data principal is you, the individual the personal data is about. The law uses this term to describe the person whose data is being collected and used.
Being the data principal matters because the law attaches rights to you, such as asking what data is held, asking for correction or deletion, and raising grievances. The term puts you at the centre.
What to check
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
You are the centre of your data.
State of Privacy exists to help data principals see what companies actually do, so the rights attached to you are not just words on paper.
What to do next
Keep it practical: take one action, save proof, and avoid giving more data than the task needs.
Keep it practical: take one action, save proof, and avoid giving more data than the task needs.
Keep it practical: take one action, save proof, and avoid giving more data than the task needs.
People also ask
Who is the data principal?
It is you, the individual the personal data relates to, under the DPDP Act.
What rights do I have as a data principal?
Generally, rights such as access, correction, deletion and grievance redressal, subject to how the law is implemented.
How do I exercise these rights?
Contact the company controlling your data, make a clear request and keep proof.
How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.
Talk to Meridian Bridge Strategy →Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.
Get the template email →We investigated 107 Indian company websites. The public report shows what we found.