Home / Glossary / Data Principal Rights (DPDP)
Glossary

Data Principal Rights (DPDP)

Data Principal rights are the rights India's DPDP Act gives the person a piece of personal data is about: to access information about their data, to have it corrected or erased, to nominate someone to act for them, and to have grievances addressed.

Also known as: DPDP rights requests, data subject rights (India)

Deadlines

Sections 11 and 12 of the DPDP Act set no statutory period for access, correction or erasure. Where an organisation publishes its own commitment, it should appear as its commitment, not as law. Rule 8(3) of the DPDP Rules sets a one-year retention floor for every Data Fiduciary.

In Raidu

Wheelhouse’s Rights and Retention fans each request out across the estate and shows the deadline the law actually gives, or says plainly that there is none. A build gate blocks any release that invents a deadline for s.11 or s.12.

Common questions

Questions about Data Principal Rights (DPDP).

Is there a 30-day deadline for DPDP access requests? +
No. Sections 11 and 12 of the DPDP Act set no statutory period.
What is the retention floor? +
Rule 8(3) sets a one-year floor for every Data Fiduciary.
See it in production

Raidu is the accountability layer for your data and your AI. Intercept. Explain. Prove.

See the runtime, the tamper-evident record, and what a regulator-ready trail looks like for your AI stack.