Tool · Free · No sign-up
Know your rights
What you can ask a company to do with your personal data, how long it has to answer, and what to do if it does not.
Your rights
Choose where you live to see what you can ask a company to do, and how long it has to answer.
The three laws side by side
Each law's own text, as cited. The DPDP rights apply from 13 May 2027.
| Law | Rights | Time to answer | If they do not answer | Status |
|---|---|---|---|---|
| DPDP Act, India | See your data; Correct or update it; Erase it; Withdraw consent; Raise a grievance; Nominate someone | 90 days at mostRule 14(3), for grievances | Use the company's grievance channel first. If that does not resolve it, you may complain to the Data Protection Board of India.s. 13(3) | Upcoming · 13 May 2027 |
| GDPR, EU and EEA | See your data; Correct it; Erase it; Restrict its use; Take it elsewhere; Object; Withdraw consent; Complain | 1 monthArt. 12(3) GDPR | Complain to the data protection authority in the country where you live or work, or where the problem arose.Art. 77 GDPR | In force |
| CCPA, California | Know and access; Correct it; Delete it; Opt out of sale or sharing; Limit sensitive information; Complain | 45 daysCiv. Code 1798.130(a)(2) | File a sworn complaint with the California Privacy Protection Agency, which may investigate.Civ. Code 1798.199.45 | In force |
Sources: DPDP Act 2023, ss. 6 and 11 to 14; DPDP Rules 2025, Rule 14; Regulation (EU) 2016/679 (GDPR); California Consumer Privacy Act (Civil Code 1798.100 onwards), as posted by the CPPA
This page explains the law in plain English. It is not legal advice.