Target Audience: The General Public (Data Principals) and Consumer Advocacy groups. Focus: Empowerment and user rights.
Introduction: The “P” in DPDPA stands for Protection. For the first time, Indian citizens (Data Principals) have a statutory framework that puts them in control of their digital shadows. At DPDPA Mentor, we believe an informed citizen is the best defense against data misuse.
What are your new rights?
- Right to Information: You can ask any company what data they have on you and who they have shared it with.
- Right to Correction and Erasure: If your data is wrong or no longer necessary for the purpose it was collected, you can demand it be fixed or deleted.
- Right to Grievance Redressal: If a company ignores your request, you have the right to complain to the Data Protection Board of India.
- Right to Withdraw Consent: You can say “no” at any time, and the company must stop processing your data immediately.
A Word of Caution: The Act also outlines “Duties” for citizens. Providing false information or filing frivolous complaints can result in fines of up to ₹10,000.
The Mentor’s Take: Your data is your digital identity. Exercise your rights, but do so responsibly. Start by reading the Privacy Notice of the apps you use most.