The DPDPA gives data principals a defined set of rights. Honouring them reliably — with turnaround times and an audit trail — is a core operational obligation.
The rights
- Right to access a summary of personal data being processed and with whom it has been shared.
- Right to correction, completion, updating and erasure.
- Right of grievance redressal — a readily available mechanism, with the Board as escalation.
- Right to nominate another individual to exercise rights in case of death or incapacity.
Build the workflow
Give data principals an easy channel to submit requests, verify identity proportionately, route each request to an owner, act within a defined turnaround, and log every step for audit.
Don’t forget processors
Requests often require action across systems and processors. Map where personal data lives so you can fulfil access, correction and erasure completely.
Operationalize it
PrivacyOS automates rights intake, verification, routing and evidence — so nothing slips past its deadline.
Related guides