At a glanceNo. Under India’s DPDP Act, deleting your personal data is a right you exercise — not a service a company sells you. Nothing in the Act lets a business put your erasure or consent-withdrawal behind a fee, and since withdrawing consent must be as easy as giving it, a paywall on your way out doesn’t meet the law. The one real cost you might face is unrelated: a service’s own cancellation terms.
Educational resource only. This explains how the right to erasure works under India’s Digital Personal Data Protection Act, 2023 (DPDP Act); it is not formal legal advice.
The plain answer: your rights aren’t a paid service
Deleting your data is something the law entitles you to — not a premium feature.
The DPDP Act gives you the right to have your personal data erased once its purpose is over or you withdraw consent (Section 12), and the right to withdraw consent at any time (Section 6). These are rights, exercised on request. The Act sets no fee for using them, and gives a company no basis to invoice you for honouring one. Treating “delete my data” as a paid transaction gets the relationship backwards: the company holds your data under an obligation, and letting go of it when required is part of that obligation.
Why a deletion fee doesn’t hold up
Charging to withdraw would break the Act’s “as easy to withdraw as to give” rule.
There’s a specific reason a deletion or withdrawal fee is a problem, not just an annoyance. The Act requires that withdrawing consent be as easy as giving it was. Giving consent cost you nothing — it was a tap at sign-up. Bolting a fee onto the exit makes withdrawal harder than consent by design, which is exactly what that rule is there to prevent. A charge that stands between you and your own right is friction the law doesn’t allow.
The fine line: service fees vs rights fees
A company can charge for a service you bought — it just can’t charge for the legal right attached to your data.
This is the distinction worth holding on to, so you know when a charge is legitimate:
- Not allowed: a fee to delete your data, to withdraw consent, or to process your access or correction request. These are rights.
- Separate matter: a service’s own commercial terms — say, an early-exit charge on a contract, or an unpaid balance you owe. That’s about the service, not about your data rights, and paying (or disputing) it is a different question from your right to erasure.
So if a business ties deletion of your data to a payment “for the deletion,” that’s the line being crossed. A genuine, unrelated bill for the service itself is not.
What to do if you’re asked to pay
Push back in writing, then escalate — you don’t have to accept the charge.
If a company demands payment to delete your data or withdraw your consent, state in writing that you’re exercising a right under the DPDP Act and that the right isn’t conditional on a fee. Ask them to complete the deletion and confirm it. If they persist, use the company’s grievance-redressal channel, and escalate to the Data Protection Board of India if it isn’t resolved. Keep the exchange — a demand for payment to exercise a right is a clear thing to put in front of the regulator.
FAQ
Is there any situation where a company can charge me to delete my data?
Not for the deletion itself. What you might owe is unrelated — an outstanding service bill or a contractual cancellation charge — which is a separate matter from your data-deletion right.
Can they charge me to see my data (an access request)?
Access is framed as a right you exercise, not a paid service, so your basic ability to see what a company holds shouldn’t sit behind a fee.
They say deletion has an “administrative fee.” Is that valid?
An “admin fee” to honour your erasure or withdrawal right runs against the Act, including the rule that withdrawal be as easy as consent. Challenge it in writing and escalate if needed.
What if I genuinely owe them money for the service?
That debt is about the service, not your data rights. They can pursue it separately, but it isn’t a lawful gate on deleting your personal data.