Skip to content
Skip to content

Your client can withdraw consent from their rights link at any moment and can ask you for a copy, a correction or deletion, and we keep the 90-day clock, the register of your answers and the record of every action.

Your client's receipt carries a private rights link, made once for each consent. It opens a page that shows the consent and offers four things: Withdraw this consent, Ask for a copy, Ask for a correction and Ask for deletion. Opening the link changes nothing by itself.

Withdrawing

A withdrawal takes effect at once and nobody in your firm has to approve it. The documents are deleted, unless the request named a law or you kept them under a law in the Retention queue. In that case they are kept until the law's date. See what happens when a client withdraws. You can also withdraw for a client who asked you directly.

Copies, corrections and deletion

The other three are requests that you answer. The law gives you 90 days to answer (DPDP Rules, Rule 14). Our guide explains how to build a rights-request process.

The 90 days start when your client confirms the request. For a request that reached you by phone, email or in person, you record it from their folder with the day they asked. Each request appears on the Rights page with its days left. We remind you 30 days and 7 days before the due day. A request stays open until you answer it. A withdrawal closes every open request under that consent. Erasing the client closes every open request from them.

We find what you hold on a person through their record. Every consent, request and document points to it, so one copy covers everything you hold on the person. How you answer depends on the request:

You can decline any request. A decline needs a reason, and your client reads it on their rights page. See declining a request. To delete everything you hold on a person across all requests, choose Erase this person in their folder, as in erasing a client. Their consent records stay.

What we record

Every request, every answer and every withdrawal is an entry on the proof record. The Register tab of the Rights page lists them, newest first. After you answer, your client sees the outcome on their rights page. We do not email them about a request or your answer.

Who can answer

A role needs the Answer rights requests switch to open the Rights page. Erasing needs the Withdraw consent, end a relationship, erase a person switch. Admins hold both. Members hold the first by default.

For example

Anita Deshpande asks Amaltas Deshmukh & Co for deletion through her rights link on 1 September 2027. The request named no law. The 90 days run to 30 November 2027. An admin chooses Erase now on 8 September 2027. Her documents are deleted that day and her rights page shows the outcome. The proof record holds her request, the answer and the fingerprint of each deleted document.