What is the grievance redressal timeframe under the DPDP Rules?
A Data Fiduciary must publish a readily available means for a Data Principal to raise a grievance and must respond within the period prescribed by the DPDP Rules. The grievance route is separate from, though often served by the same intake as, a rights request, and a Data Principal is generally expected to use it before approaching the Data Protection Board.
Confirm the currently prescribed period in the Rules as they stand rather than relying on a figure quoted second-hand, including here — the operational point is that the period runs from receipt, so an unmonitored inbox is the real risk.
Keep the log. Showing that grievances were received, routed and answered on time is what converts a claim into evidence.
General information about the DPDP Act, not legal advice. Obligations depend on your circumstances.
Related questions
Priya Gupta — Priya writes on compliance operations at ProtectComply, including data principal rights, grievance handling and sector-specific programmes.
Where do you stand under DPDP?
Take the free readiness check and find out in 10 minutes.
Start free readiness check →