Grievance redressal

Your right to a readily available way to complain to a Data Fiduciary or Consent Manager about how it has handled your personal data or your rights. The fiduciary must set up an effective mechanism (s. 8(10)), publish how to reach it and respond within a stated time; the DPDP Rules 2025 cap that period at 90 days. You must exhaust this route before you complain to the Board (s. 13(3)), and a Significant Data Fiduciary's Data Protection Officer is the point of contact for it (s. 10(2)(a)).

A Data Principal shall have the right to have readily available means of grievance redressal provided by a Data Fiduciary or Consent Manager in respect of any act or omission of such Data Fiduciary or Consent Manager regarding the performance of its obligations in relation to the personal data of such Data Principal or the exercise of her rights under the provisions of this Act and the rules made thereunder.