Tool · Free · No sign-up
Rights request letter
Write a request to any company to see, correct or erase your data, citing the law that gives you the right and the time it has to answer.
When to expect an answer
Each law's own text, as cited. The DPDP rights apply from 13 May 2027.
| Law | Time to answer | How to ask | If they do not answer | Status |
|---|---|---|---|---|
| DPDP Act, India | 90 days at most | Use the means the company publishes on its website or app for rights requests, with the identifier it asks for, such as a username, customer ID or mobile number.Rule 14(1) and (2) | Use the company's grievance channel first. If that does not resolve it, you may complain to the Data Protection Board of India.s. 13(3) | Upcoming · 13 May 2027 |
| GDPR, EU and EEA | 1 month | Ask the company by any means, in writing is best. It may ask you to confirm who you are, and it must answer free of charge unless a request is manifestly unfounded or excessive.Art. 12(2), (5) and (6) GDPR | Complain to the data protection authority in the country where you live or work, or where the problem arose.Art. 77 GDPR | In force |
| CCPA, California | 45 days | Use one of the ways the business offers for requests, such as a toll-free number or a web form, and its opt-out link for sale or sharing. It may verify who you are, and may not treat you differently for using your rights.Civ. Code 1798.125, 1798.130(a)(1) | File a sworn complaint with the California Privacy Protection Agency, which may investigate.Civ. Code 1798.199.45 | In force |
Sources: DPDP Act 2023, ss. 6 and 11 to 14; DPDP Rules 2025, Rule 14; Regulation (EU) 2016/679 (GDPR); California Consumer Privacy Act (Civil Code 1798.100 onwards), as posted by the CPPA
This page explains the law in plain English. It is not legal advice.