What rights do Data Principals have under the DPDP Act?
Under the DPDP Act a Data Principal has the right to obtain a summary of the personal data being processed and the processing activities undertaken, the right to correction, completion, updating and erasure of their personal data, the right to readily available means of grievance redressal, and the right to nominate another individual to exercise these rights in the event of death or incapacity.
The operational consequence is that you need an intake route, a way to verify the requester, a workflow that reaches every system holding the data, and a log that shows each request was answered within the prescribed period.
Erasure has limits: it does not override a legal obligation to retain records, which is why regulated sectors need a per-record view of which basis applies and for how long.
General information about the DPDP Act, not legal advice. Obligations depend on your circumstances.
Related questions
Priya Gupta — Priya writes on compliance operations at ProtectComply, including data principal rights, grievance handling and sector-specific programmes.
Where do you stand under DPDP?
Take the free readiness check and find out in 10 minutes.
Start free readiness check →