Role
A Data Principal is the individual whose personal data is processed, and the holder of the rights the Act grants.
"Data Principal" means the individual to whom the personal data relates and where such individual is (i) a child, includes the parents or lawful guardian of such a child; (ii) a person with disability, includes her lawful guardian, acting on her behalf.
If the data is about you, you are the Data Principal. The Act gives you rights to access, correct and erase your data, to grievance redressal, and to nominate someone to act for you.
For a child, the Data Principal includes the parent or lawful guardian. For a person with disability who has a lawful guardian, it includes that guardian acting on their behalf.
When you open an account with an online store, you are the Data Principal. The store is the Data Fiduciary.
Can a company be a Data Principal?
No. The Act protects natural persons. A company's own information is not a Data Principal's personal data.
What rights does a Data Principal have?
Access, correction and erasure, grievance redressal, and nomination (Sections 11 to 14).