A business example
A customer named Neha places an order, and the retailer stores her delivery details.
Individual
Neha is the person the delivery data relates to.
Business record
The retailer stores the information for the transaction.
Rights context
A request concerning that information must be assessed against the applicable process.
What this shows
The individual, the business holding the record and the software provider are different actors. This example identifies their roles without assuming every right is currently operative.
What it is often confused with
The data principal is not the organisation storing the data or the software provider.
What to look at in your business
Map requests and communications to the correct individual and applicable process.
Context and further reading
MeitY: Digital Personal Data Protection Act, 2023. This reference supports the terminology; use the linked guide for applicability and operative requirements.
Kosha.Services · Updated 2 October 2026