Question 1

What data principal rights does the DPDP Act grant?

Accepted Answer

Under Sections 11–15, data principals have the right to access information about their personal data, request correction and erasure, nominate another individual to exercise rights in case of death or incapacity, and access grievance redressal mechanisms. Consent can be withdrawn at any time under Section 6(6).

Question 2

What is DPDP rights management software?

Accepted Answer

DPDP rights management software automates fulfilment of data principal rights — intake of access, correction and erasure requests (DSR), grievance tickets, SLA tracking, identity verification, and audit trails for regulator-ready evidence.

Question 3

What SLA should DSR requests meet under DPDP?

Accepted Answer

The DPDP Act and Rules require timely response to data principal requests. Organisations should establish internal SLAs (typically 7-day acknowledgment, 30-day fulfilment) and maintain immutable logs. Complynz DSR portal automates intake, routing and evidence export.

Right	Section	Complynz Module
Right to access information about personal data	Section 11	DSR Portal
Right to correction and erasure	Section 12	DSR Portal
Right to grievance redressal	Section 13	Grievance Portal
Right to nominate	Section 14	DSR Portal
Right to withdraw consent	Section 6(6)	Consent Trust Centre

DPDP Data Principal Rights Management

Rights Under the DPDP Act