Skip to main content
dpdprules.org
Data breached?
☰

Sources last verified on 17 August 2026. Methodology

Tool · For individuals

Your rights over your personal data

Pick what you want to do and see what the framework gives you, the steps to take, and the exact official provisions behind each one. This page is for individuals; the company compliance tools live separately.

Timing note: the rights sections of the Act (sections 11 to 14) are in the group due eighteen months after the publication of commencement notification G.S.R. 843(E), and the request machinery in Rule 14 is in the matching Rules group (both computed as 13 May 2027, interpretation until confirmed). See the timeline for the current verified position.

What information does an organisation have about me?

From a Data Fiduciary you previously gave consent to, you can obtain a summary of your personal data and the processing activities, plus the identities of the other Data Fiduciaries and Data Processors it shared your data with and a description of what was shared. Sharing with authorities for offence prevention and similar purposes is carved out.

Steps

  1. Find the organisation's published means for rights requests on its website or app.
  2. Make the request using those means, giving the identifiers its terms of service require, such as your username.
  3. If the response does not come or does not satisfy you, use the grievance channel below before approaching the Board.

Your duties when exercising rights. The Act also places duties on you when exercising rights: comply with applicable laws, do not impersonate anyone, do not suppress material information when providing your personal data for any document, unique identifier, proof of identity or proof of address issued by the State or its instrumentalities, do not file false or frivolous grievances or complaints, and furnish only verifiably authentic information for correction or erasure.