Chapter III — Rights and duties of Data Principal

Section 13 — Right of grievance redressal

13. (1) A Data Principal shall have the right to have readily available means of grievance redressal provided by a Data Fiduciary or Consent Manager in respect of any act or omission of such Data Fiduciary or Consent Manager regarding the performance of its obligations in relation to the personal data of such Data Principal or the exercise of her rights under the provisions of this Act and the rules made thereunder.

(2) The Data Fiduciary or Consent Manager shall respond to any grievances referred to in sub-section (1) within such period as may be prescribed from the date of its receipt for all or any class of Data Fiduciaries.

(3) The Data Principal shall exhaust the opportunity of redressing her grievance under this section before approaching the Board.

Source: The Digital Personal Data Protection Act, 2023 (No. 22 of 2023), Act No. 22 of 2023, Gazette of India Extraordinary, 11 August 2023; SHA-256 4deb23981d30… — verified copy

Plain-language note

Plain-language note pending

Questions people ask about this provision

  • What are the rights of Data Principals under the DPDP Act?
  • How should organizations handle Data Subject Rights requests under the DPDP Act?
  • What are the obligations of Data Fiduciaries under the DPDP Act?
  • Can a Data Principal complain directly to the Data Protection Board under the DPDP Act?
  • What is grievance redressal under the DPDP Act?
  • How long does a Data Fiduciary have to respond to a grievance under the DPDP Act?
  • What challenges do organizations face with access requests under the DPDP Act?
  • Does the DPDP Act allow individuals to sue for data breach compensation?

Taught in Peoples Rights