Ch IPreliminary
S.1 Short title and commencementS.2 DefinitionsS.3 Application and scopeCh IIObligations of Data Fiduciary
S.4 Grounds for processingS.5 NoticeS.6 ConsentS.7 Certain legitimate usesS.8 Data Fiduciary obligationsS.9 Children’s dataS.10 Significant Data FiduciaryCh IIIRights and duties of Data Principal
S.11 Right to accessS.12 Correction and erasureS.13 Grievance redressalS.14 Right to nominateS.15 Duties of the Data PrincipalCh IVSpecial provisions
S.16 Transfer outside IndiaS.17 ExemptionsCh VData Protection Board of India
S.18 Establishment of the BoardS.19 Composition of the BoardS.20 Salary and term of officeS.21 DisqualificationsS.22 Resignation and vacanciesS.23 Proceedings of the BoardS.24 Officers and employeesS.25 Members as public servantsS.26 Powers of the ChairpersonCh VIBoard powers and procedure
S.27 Powers and functions of the BoardS.28 Procedure followed by the BoardCh VIIAppeal and dispute resolution
S.29 Appeal to the Appellate TribunalS.30 Tribunal orders as a decreeS.31 Alternate dispute resolutionS.32 Voluntary undertakingCh VIIIPenalties
S.33 Penalties and the ScheduleS.34 Penalties to Consolidated FundCh IXMiscellaneous
S.35 Good-faith protectionS.36 Power to call for informationS.37 Blocking of accessS.38 Consistency with other lawsS.39 Bar of jurisdictionS.40 Power to make rulesS.41 Laying of rules before ParliamentS.42 Power to amend the ScheduleS.43 Power to remove difficultiesS.44 Amendments to other ActsRight
The right to access lets a Data Principal obtain a summary of the personal data being processed about them and who it has been shared with.
TL;DR
The right to access information (Section 11) lets a Data Principal obtain a summary of the personal data being processed about them, the processing carried out, and the identities of other fiduciaries and processors the data was shared with.
The Data Principal shall have the right to obtain from the Data Fiduciary a summary of personal data which is being processed and the processing activities undertaken, and the identities of all other Data Fiduciaries and Data Processors with whom the personal data has been shared, along with a description of the personal data so shared.
Access is the transparency right. On request, the fiduciary must give a summary of the data it processes and the processing it carries out.
It also covers sharing: the person can learn the identities of the other fiduciaries and processors the data was shared with, and a description of what was shared.
You ask a service for a summary of your data and a list of the partners it was shared with, and it must provide both.
What can I ask for?
A summary of your data and the processing, plus the identities of fiduciaries and processors it was shared with.
Are there limits?
Some sharing for offence prevention or investigation is exempt from disclosure under Section 11(2).
Consultant-led and partner-backed.