Personal or Domestic Use
Processing by an individual for personal or household purposes, which is outside the Act.
If an individual uses personal data only for her own personal or household needs, the DPDP Act does not apply. The moment the use turns professional or commercial, it can.
Meaning of Personal or Domestic Use
A person keeping family contacts on a phone is not a Data Fiduciary. The exclusion does not cover businesses, professionals or societies, even small ones.
Section 3(c)(i) says the Act does not apply to personal data processed by an individual for any personal or domestic purpose. The exclusion exists so that everyday life stays free of compliance work. Saving a friend's number in your phone, keeping family photographs in cloud storage or maintaining a household contact list does not make a person a Data Fiduciary.
Three limits keep the clause narrow. First, it applies to an individual, so a company, firm, society or trust cannot use it. Second, the purpose must be personal or domestic, so using the same phone for customer contacts of a business falls outside it. Third, it is about the purpose of the processing and not the device or app, because a WhatsApp group can be domestic for a family and professional for a coaching class.
Edge cases need judgement. A home CCTV that watches only the owner's own property looks domestic, while one that systematically records a public road or neighbours may not. An influencer posting videos of friends for brand deals is likely to be professional. A person running a home bakery from her kitchen and keeping orders in her phone is probably processing for business, even if she works alone.
Do not confuse this with the other exclusion in Section 3(c), which covers publicly available data, or with Section 17 exemptions, which cover specific rights and duties for listed activities. It is also not the same as GDPR's household exemption, although the idea is similar. The Act does not give a test, so the safest reading is by purpose: is the individual acting in a private capacity, or in a role that serves business, profession, institution or public activity?
Examples of Personal or Domestic Use
Saving friends' birthdays in a phone calendar is personal use. A housing society running a visitor-management app is not.
A person keeps relatives' birthdays and addresses in her phone and shares a family album with cousins. This is personal use and the Act does not apply to it.
A home tutor keeps students' names, parents' numbers and fee records in a spreadsheet. Because this supports a paid professional activity, she is unlikely to be able to rely on the personal or domestic exclusion.
A residents' association runs a gate app that records visitors' photographs and phone numbers. It is an association, not an individual, so the exclusion does not help and it must meet fiduciary duties.
Why Personal or Domestic Use matters
The line decides whether tens of millions of small operators have fiduciary duties. Freelancers, tutors, home chefs, small landlords and neighbourhood groups all hold personal data and may wrongly assume the household exclusion protects them. If they are outside the exclusion, general obligations apply and the penalty for an uncategorised breach can reach ₹50 crore.
For ordinary people, the clause gives comfort that private life is not regulated. It also means that when a private individual misuses another person's data, such as sharing private photos, the remedy usually lies in other laws, not in the Board's data-protection process.
How it works in practice
- 1Ask who is processing and why. If the person is an individual doing something for family, social or household reasons, the exclusion probably applies.
- 2Check whether any money, business benefit or professional role is involved. Customer lists, client records, tenant files and student databases usually indicate a non-domestic purpose.
- 3Separate personal and business use of devices. Keep customer contacts in a business account or tool, so you can apply notice, security and deletion practices to it.
- 4Where unsure, apply light-touch compliance: tell people why you hold their data, secure it, delete it when finished and give them a way to contact you.
- 5Housing societies, associations and clubs should assume they are covered, as they are not individuals.
Where it appears in the DPDP Act and Rules
Common mistakes to avoid
Assuming small scale equals domestic use. A one-person business is still outside the exclusion.
Thinking the exclusion covers any private phone. The test is the purpose, not whose device it is.
Applying it to societies and groups. The clause covers individuals only.
Forgetting that other laws still apply. Sharing intimate images or defamatory content can be unlawful regardless of the DPDP Act.
Compliance tips
Write down a short internal rule for staff on mixing personal devices and customer data.
If you run a micro-business from home, treat customer data with business-grade care and a simple notice.
Societies and clubs should appoint a person responsible for questions and build a retention rule for visitor logs.
Review the Central Government notifications on small entities and start-ups, which may change how obligations apply to small operators.
Common questions about Personal or Domestic Use
Does the DPDP Act apply to personal use of data?
No. Section 3(c)(i) excludes personal data processed by an individual for a personal or domestic purpose. Keeping family contacts or photographs for yourself is outside the Act, whereas using the same data in a business or professional role is not.
Is a home-based business covered by the exclusion?
Usually not. The exclusion is about personal or domestic purpose. If you keep customer details to run a business, even from home and alone, your processing is likely to be for a commercial purpose and could bring you within the Act.
Can a housing society use the domestic-use exclusion?
No. The exclusion applies to an individual. A society is an association of persons and, if it processes residents' or visitors' [digital personal data](term/digital-personal-data), it generally needs to meet the Data Fiduciary obligations.
Does home CCTV fall under personal or domestic use?
It depends on the facts. A camera covering only one's own premises is more likely to be domestic, while one that systematically records public areas or other people's property raises doubts. Seek advice if the setup is more than minimal.