Short Answer
Any data that can identify an individual directly or indirectly, including names, phone numbers, purchase history, and digital identifiers.
Any data that can identify an individual directly or indirectly is considered personal data. This includes basic details like name and phone number, as well as behavioral or transactional data.
Businesses often underestimate this — even purchase history, app usage, and preferences are covered under DPDP.
Law Reference
Section 2(t) – Definition of Personal Data
"Personal data means any data about an individual who is identifiable…"
Businesses often underestimate the scope of personal data. Purchase history, app usage patterns, and loyalty data all qualify, requiring comprehensive data governance.
A retail chain's loyalty program data including purchase frequency, preferred categories, and reward points all constitute personal data under DPDP.
Was this answer helpful?
Our team is here to help you with any questions about DPDP compliance.