Readiness assessment

Right

Right to Access Information

The right to access lets a Data Principal obtain a summary of the personal data being processed about them and who it has been shared with.

Defined inSection 11
CategoryRights & Duties
Applies toEvery Data Principal who has given consent

What the Act says

DPDP Act 2023, Section 11(1)

The Data Principal shall have the right to obtain from the Data Fiduciary a summary of personal data which is being processed and the processing activities undertaken, and the identities of all other Data Fiduciaries and Data Processors with whom the personal data has been shared, along with a description of the personal data so shared.

In plain language

Access is the transparency right. On request, the fiduciary must give a summary of the data it processes and the processing it carries out.

It also covers sharing: the person can learn the identities of the other fiduciaries and processors the data was shared with, and a description of what was shared.

Example

You ask a service for a summary of your data and a list of the partners it was shared with, and it must provide both.

Related terms

Related sections of the Act

Related Rules

Frequently asked questions

What can I ask for?

A summary of your data and the processing, plus the identities of fiduciaries and processors it was shared with.

Are there limits?

Some sharing for offence prevention or investigation is exempt from disclosure under Section 11(2).

Continue learning