Data Principal Rights

Also known as: DSR; data subject rights

The rights individuals hold under the DPDP Act: to obtain a summary of their personal data and the processing undertaken, to correction, completion, updating and erasure, to readily available grievance redressal, and to nominate someone to exercise these rights.

These are time-bound in practice. Meeting them needs a monitored intake, a way to verify the requester, a workflow reaching every system holding the data, and a log evidencing that each request was answered within the prescribed period.

General information about the DPDP Act, not legal advice.