Read as
Last updated: April 29, 2026
Why this module exists. DPDP Sections 11, 12, 13 grant Data Principals four rights: access, correction, erasure, grievance redress. Every Data Fiduciary must have a workflow to honour these.
Why this module exists. DPDP Sections 11, 12, 13 grant Data Principals four rights: access, correction, erasure, grievance redress. Every Data Fiduciary must have a workflow to honour these. The workflow is where most Indian businesses fail — they have a privacy notice, no DSR pipeline, and a 7-day deadline they can’t meet.
The four DPDP rights
- §11 — Right to information about personal data: which personal data is being processed, the purposes, identities of data processors, and how the data principal can exercise their rights.
- §12 — Right to correction and erasure: correct inaccurate data, complete incomplete data, update outdated data, erase data no longer necessary.
- §13 — Right of grievance redressal: a designated mechanism to address complaints; if unresolved, escalate to the Data Protection Board.
- §14 — Right to nominate: nominate another individual to exercise rights in case of death/incapacity.
Want this for your team?
Custom team training + practitioner advisory
Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.
Book team training call
Replies in 4 working hrs · India-only · Senior consultants