What are Data Principal rights?
Data Principal rights are the entitlements the DPDP Act gives every individual over the personal data that businesses hold about them. The Data Principal is the person the data is about, and these rights let them see, fix, and control that data.
Educational resource only — not legal advice.
Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to access a summary of your data and who it was shared with, to correct or complete it, to have it erased, to a readily available grievance-redressal channel, and to nominate someone to act for you if you die or can’t act yourself. Alongside these, where processing runs on consent, you can withdraw that consent at any time.
Why it matters to you. For an individual, these are the practical levers to control your own data. For a business, each right is something your systems must be able to deliver on request — you’re accountable for fulfilling them.
Collecting personal data from your own customers?
These are the rights your business has to honour. See where you stand with a two-minute self-check — no sign-up, no data stored.
Run the compliance self-check →