Lesson 3.1: Rights overview: what a Data Principal can ask for
The Act gives people a short, clear set of rights. Learn all of them before studying each in detail. This DPDPA 2023 course page explains what a data principal can in plain language.
What you will learn about what a data principal can
- List the five rights
- Know which section gives each right
- Understand how Rule 14 turns rights into process
Rights in one page (what a data principal can)
Chapter III gives the Data Principal the right to information (Section 11), correction and erasure (Section 12), grievance redressal (Section 13) and nomination (Section 14). Section 15 adds duties. The Rules explain how a fiduciary must publish the way to exercise these rights.
Your five rights: click each
Select a numbered box to read more.
Rights compared with GDPR (what a data principal can)
| Right | DPDPA | GDPR |
|---|---|---|
| Access | Summary and sharing details | Full copy and details |
| Rectification | Yes | Yes |
| Erasure | Yes, with legal-retention exception | Yes, with several exceptions |
| Portability | No | Yes |
| Objection and restriction | No separate right; consent withdrawal | Yes |
| Nomination | Yes | No |
Worked example
A customer asks a store what data it holds. The store must be able to respond with a summary, not hand over its entire database. That is why record-keeping matters.
Activity (5 minutes) (what a data principal can)
Search your website for a page that explains how a person can use these rights. Write what is missing.
Check your understanding of what a data principal can
Q1. How many rights does Chapter III give?
Q2. Does the Act give a data portability right?
Q3. Which section gives the nomination right?
Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.
