Data Subject Rights Under DPDP: What Businesses Need to Know

<h2>Overview of Data Subject Rights</h2>

<p>The DPDP Act empowers individuals (Data Principals) with specific rights regarding their personal data. Businesses must establish processes to honor these rights within stipulated timelines.</p>

<h2>Right to Access</h2>

<p>Data Principals have the right to obtain:</p>

<ul>

<li>Confirmation of whether their data is being processed</li>

<li>A summary of personal data being processed</li>

<li>Information about Data Processors involved</li>

<li>Details of any cross-border data transfers</li>

</ul>

<h2>Right to Correction</h2>

<p>Individuals can request correction of inaccurate or misleading personal data. Businesses must:</p>

<ul>

<li>Verify the identity of the requester</li>

<li>Update records within a reasonable timeframe</li>

<li>Notify third parties who received the incorrect data</li>

</ul>

<h2>Right to Erasure</h2>

<p>Also known as the "right to be forgotten," this allows individuals to request deletion of their personal data when:</p>

<ul>

<li>Data is no longer necessary for the original purpose</li>

<li>Consent has been withdrawn</li>

<li>Data was processed unlawfully</li>

</ul>

<h2>Implementing DSR Workflows</h2>

<p>Effective Data Subject Request (DSR) management requires:</p>

<ol>

<li><strong>Request Intake:</strong> Multiple channels for submitting requests</li>

<li><strong>Identity Verification:</strong> Secure methods to verify requester identity</li>

<li><strong>Request Tracking:</strong> System to track status and SLA compliance</li>

<li><strong>Response Generation:</strong> Automated or semi-automated response preparation</li>

<li><strong>Audit Trail:</strong> Complete documentation of all actions taken</li>

</ol>

<h2>Timeline Requirements</h2>

<p>While the DPDP Act specifies timelines through rules, best practice suggests:</p>

<ul>

<li>Acknowledge requests within 48 hours</li>

<li>Complete simple requests within 30 days</li>

<li>Complex requests may take longer with proper communication</li>

</ul>