Your Rights under India's DPDP Act, 2023
A simplified summary of your rights under the Digital Personal Data Protection Act, 2023.
Right to Access Information
You have the right to ask a Data Fiduciary (a company processing your data) for a summary of the personal data they process about you and the identities of all other Data Fiduciaries and Data Processors with whom they have shared your data.
Right to Correction and Erasure
You can request the correction of inaccurate or misleading personal data, the completion of incomplete data, and the update of your personal data. Importantly, you have the right to erasure (deletion) of your personal data unless its retention is necessary for a legal purpose.
Right to Withdraw Consent
Where you have given consent for the processing of your personal data, you have the right to withdraw that consent at any time. The consequences of such withdrawal will be borne by you (e.g., a service may stop working).
Right to Grievance Redressal
You have the right to readily available means of grievance redressal provided by the Data Fiduciary. If they do not respond or you are unsatisfied, you can approach the Data Protection Board of India.
Right to Nominate
You have the right to nominate any other individual who shall, in the event of your death or incapacity, exercise your rights under the Act.
Disclaimer: This is a simplified summary for informational purposes only and does not constitute legal advice.