Back to DPDPA Glossary Index
Section 8(1)–(2); contractual practiceCore Concepts
Sub-Processor
A sub-processor is a supplier engaged by another processor to process personal data on a fiduciary's behalf.
Meaning and legal context
DPDP does not separately define this label or mandate universal 30-day change notices. The fiduciary remains responsible for processing on its behalf, making clear contracts and supplier oversight useful.
Practical application
Maintain a supplier chain with purposes, locations and agreed change notifications.
Related concepts
Official sources and editorial review
Prepared by DPDPA Shield. Explanations are plain-language summaries; the cited legislation controls. Last reviewed .
Put privacy knowledge into practice
Explore consent, data inventory and rights-request workflows with DPDPA Shield.