Chapter III — Rights and duties of Data Principal

Section 12 — Right to correction and erasure of personal data

12. (1) A Data Principal shall have the right to correction, completion, updating and erasure of her personal data for the processing of which she has previously given consent, including consent as referred to in clause (a) of section 7, in accordance with any requirement or procedure under any law for the time being in force.

(2) A Data Fiduciary shall, upon receiving a request for correction, completion or updating from a Data Principal,—

(a) correct the inaccurate or misleading personal data;

(b) complete the incomplete personal data; and

(c) update the personal data.

(3) A Data Principal shall make a request in such manner as may be prescribed to the Data Fiduciary for erasure of her personal data, and upon receipt of such a request, the Data Fiduciary shall erase her personal data unless retention of the same is necessary for the specified purpose or for compliance with any law for the time being in force.

Source: The Digital Personal Data Protection Act, 2023 (No. 22 of 2023), Act No. 22 of 2023, Gazette of India Extraordinary, 11 August 2023; SHA-256 4deb23981d30… — verified copy

Plain-language note

Plain-language note pending

Questions people ask about this provision

  • What are the rights of Data Principals under the DPDP Act?
  • How long can companies store personal data under the DPDP Act?
  • What happens when a user withdraws consent under the DPDP Act?
  • How should organizations handle Data Subject Rights requests under the DPDP Act?
  • What is the Right to be forgotten under the DPDP Act?
  • What are the obligations under the DPDP Act when a user withdraws consent for data processing?
  • What happens if a customer requests data deletion or withdraws consent under the DPDP Act?
  • How quickly must a business respond to a request or inquiry under the DPDP Act?

Taught in Peoples Rights