Lesson 3.1: Rights overview: what a Data Principal can ask for

Module 3 · Lesson 3.1 of 8 · About 30 minutes · What a Data Principal can

The Act gives people a short, clear set of rights. Learn all of them before studying each in detail. This DPDPA 2023 course page explains what a data principal can in plain language.

what a data principal can - DPDPA 2023 course lesson banner
Advertisement

What you will learn about what a data principal can

  • List the five rights
  • Know which section gives each right
  • Understand how Rule 14 turns rights into process

Rights in one page (what a data principal can)

Chapter III gives the Data Principal the right to information (Section 11), correction and erasure (Section 12), grievance redressal (Section 13) and nomination (Section 14). Section 15 adds duties. The Rules explain how a fiduciary must publish the way to exercise these rights.

Your five rights: click each

Select a numbered box to read more.

1Information2Correctionand update3Erasure4Grievance5Nomination
Tap or click a step to see exactly what to do.
Advertisement

Rights compared with GDPR (what a data principal can)

RightDPDPAGDPR
AccessSummary and sharing detailsFull copy and details
RectificationYesYes
ErasureYes, with legal-retention exceptionYes, with several exceptions
PortabilityNoYes
Objection and restrictionNo separate right; consent withdrawalYes
NominationYesNo

Worked example

A customer asks a store what data it holds. The store must be able to respond with a summary, not hand over its entire database. That is why record-keeping matters.

Activity (5 minutes) (what a data principal can)

Search your website for a page that explains how a person can use these rights. Write what is missing.

Key takeaway: Plan one single route for all requests. Rights are easy to meet when the route is clear.

Check your understanding of what a data principal can

Q1. How many rights does Chapter III give?

Q2. Does the Act give a data portability right?

Q3. Which section gives the nomination right?

Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.

Official sources for what a data principal can: Digital Personal Data Protection Rules, 2025 (MeitY, PDF) and DPDP Rules 2025, English text (PDF). Always check the latest official notifications.