Data fiduciary

    ESG & Governance

    Under the DPDP Act, the person or organisation that decides why and how personal data is processed.

    Data fiduciaries carry the main legal duties under the Act, including notice, consent, security and breach reporting. The government can name some as significant data fiduciaries, which must also carry out independent audits and impact assessments. A company that processes data only on another's instructions is a data processor.

    Related terms