====================================================================
STARTING TEMPLATE from dpdprules.org
Grievance redressal policy skeleton

Practical recommendation, not legal advice. Have your legal counsel
review and adapt this before use. Bracketed text marks what you must
fill in or decide.

Provisions tracked: section 13 of the DPDP Act 2023 (right of
grievance redressal) and Rule 14(3) of the DPDP Rules 2025 (the
published response period must not exceed ninety days). These sit in
the commencement group due eighteen months from the notification
gazette; the computed date 13 May 2027 is interpretation until
officially confirmed. Verified source references:
https://dpdprules.org/act/13 and https://dpdprules.org/rules/14
====================================================================

Grievance redressal policy of [organisation name]

1. Scope
   This policy covers grievances of Data Principals regarding any
   act or omission of [organisation name] concerning its
   obligations for their personal data or the exercise of their
   rights under the Digital Personal Data Protection Act 2023.

2. How to raise a grievance
   [Channel or channels: form link, email address, in app path.
   Keep the channel readily available and publish it in the privacy
   notice and on the website or app.]

3. What to include
   [Identity and contact of the person, description of the
   grievance, the processing or right concerned. Do not demand more
   than needed to act on the grievance.]

4. Our response period
   We will respond within [number] days of receiving a grievance.
   [The published period must not exceed ninety days. Choose the
   shortest period your operations can honour; a shorter period is
   a service standard, the ninety days is the legal ceiling.]

5. How we handle a grievance
   [Intake and acknowledgement, ownership, investigation,
   decision, communication of the outcome. Name the roles, not
   individuals.]

6. Escalation
   If you are not satisfied with our response, you may approach the
   Data Protection Board of India. The Act requires the opportunity
   of grievance redressal with us to be exhausted before
   approaching the Board.

7. Measures behind this policy
   [List the technical and organisational measures that make the
   channel effective within the published period: ticketing,
   routing, escalation thresholds, staffing, monitoring of ageing
   grievances.]

8. Review
   This policy is reviewed [frequency] and after any material
   change in processing or in the law.