A clearer path through business compliance.Built for businesses across India

Business wiki · Data and technology

Personal data

Information relating to an individual who is identifiable by or in relation to that information.

Search terms: PII personally identifiable information

A business example

An online shop removes names from an order export but keeps phone numbers and delivery addresses.

Follow the exampleFictional business scenario
  1. Original records

    Names, contact details and orders relate to individual customers.

  2. Edited export

    Names are removed, but phone numbers and addresses remain.

  3. Identification test

    The remaining information can still identify customers.

What this shows

Deleting one field does not necessarily anonymise the dataset. Assess what the remaining fields reveal together.

What it is often confused with

Removing a name does not necessarily make a record anonymous if the individual can still be identified.

What to look at in your business

Map the fields held, purposes, access and retention arrangements.

Context and further reading

MeitY: Digital Personal Data Protection Act, 2023. This reference supports the terminology; use the linked guide for applicability and operative requirements.

DPDP implementation phases →

Related terms

Data fiduciary

The person determining the purpose and means of processing personal data under the DPDP terminology.

Data principal

The individual to whom personal data relates under the DPDP terminology, with specified representation rules in some cases.

Data processor

A person processing personal data on behalf of a data fiduciary under the DPDP terminology.