Definitions
Key terms used throughout the Rules and how they link to the ActThis rule defines four terms used in the Rules: “Act” (the DPDP Act 2023), “techno-legal measures” (digital processes for the Board and appeals), “user account” (any online profile or handle a person uses with a Fiduciary), and “verifiable consent” (parental or guardian consent under Rules 10-11).
Download full Rules (PDF)In plain English
This rule defines four terms used in the Rules: “Act” (the DPDP Act 2023), “techno-legal measures” (digital processes for the Board and appeals), “user account” (any online profile or handle a person uses with a Fiduciary), and “verifiable consent” (parental or guardian consent under Rules 10-11). Any other term already defined in the Act keeps its Act meaning.
Key points
- “Verifiable consent” points to Rules 10 and 11
- “User account” covers profiles, handles, email, and mobile numbers
- Undefined terms inherit definitions from the DPDP Act
This rule gives effect to Section 40 of the Digital Personal Data Protection Act, 2023.
Read the parent sectionOfficial rule text
Reproduced from the Gazette notification (G.S.R. 846(E), 13 November 2025).
2. Definitions. - (1) In these rules, unless the context otherwise requires, - (a) “Act” means the Digital Personal Data Protection Act, 2023 (22 of 2023); (b) “techno-legal measures” means as referred to under rules 20 and 22; (c) “user account” means the online account registered by the Data Principal with the Data Fiduciary, and includes any profiles, pages, handles, email address, mobile number and other similar presences by means of which such Data Principal is able to access the services of such Data Fiduciary; and (d) “verifiable consent” means a consent as specified in rule 10 or 11. (2) The words and expressions used in these rules and not defined, but defined in the Act, shall have the same meanings respectively assigned to them in the Act.