Readiness assessment

Right

Right of Grievance Redressal

This right entitles a Data Principal to a readily available way to raise grievances with a Data Fiduciary or Consent Manager.

Defined inSection 13
CategoryRights & Duties
Applies toEvery Data Principal

What the Act says

DPDP Act 2023, Section 13(1)

A Data Principal shall have the right to have readily available means of grievance redressal provided by a Data Fiduciary or Consent Manager in respect of any act or omission regarding the performance of its obligations in relation to the personal data of such Data Principal or the exercise of her rights.

In plain language

Every fiduciary and Consent Manager must offer an accessible grievance channel and respond within the period the Rules prescribe.

The Data Principal must use this channel first: Section 13(3) requires exhausting it before approaching the Data Protection Board.

Example

You complain to a service about how it handled your data. It must have a working grievance process and respond in the prescribed time before you escalate to the Board.

Related terms

Related sections of the Act

Related Rules

Frequently asked questions

Can I go straight to the Board?

No. Section 13(3) requires you to exhaust the fiduciary's grievance mechanism first.

Who must provide the channel?

Both Data Fiduciaries and Consent Managers.

Continue learning