Lesson 7.4: Contact point and grievance mechanism

Module 7 · Lesson 7.4 of 8 · About 30 minutes · Contact point and grievance mechanism

People must be able to reach you. Publish the details. This DPDPA 2023 course page explains contact point and grievance mechanism in plain language.

contact point and grievance mechanism - DPDPA 2023 course lesson banner
Advertisement

What you will learn about contact point and grievance mechanism

  • Publish contact details
  • Understand Rule 9
  • Set up a grievance mechanism

Section 8(9), 8(10) and Rule 9 (contact point and grievance mechanism)

A fiduciary must publish prominently on its website or app the business contact information of the Data Protection Officer, or another person able to answer the principal’s questions, and provide a grievance redressal mechanism.

Contact setup

Select a numbered box to read more.

1Chooseperson2Createmailbox3Publish4Train
Tap or click a step to see exactly what to do.
Advertisement

Checklist for the contact page (contact point and grievance mechanism)

ItemPresent?
Name or titleYes / No
EmailYes / No
Phone or formYes / No
Response timeYes / No

Worked example

A footer link says Privacy contact, opening a page with the officer’s title, email and the response time promise.

Activity (5 minutes) (contact point and grievance mechanism)

Add a visible Privacy contact link to your website footer.

Key takeaway: A shared mailbox, not a personal email, survives staff changes.

Check your understanding of contact point and grievance mechanism

Q1. Contact details must be:

Q2. Who answers principals?

Q3. Use a:

Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.

Official sources for contact point and grievance mechanism: Digital Personal Data Protection Rules, 2025 (MeitY, PDF) and DPDP Rules 2025, English text (PDF). Always check the latest official notifications.