Ch IPreliminary
S.1 Short title and commencementS.2 DefinitionsS.3 Application and scopeCh IIObligations of Data Fiduciary
S.4 Grounds for processingS.5 NoticeS.6 ConsentS.7 Certain legitimate usesS.8 Data Fiduciary obligationsS.9 Children’s dataS.10 Significant Data FiduciaryCh IIIRights and duties of Data Principal
S.11 Right to accessS.12 Correction and erasureS.13 Grievance redressalS.14 Right to nominateS.15 Duties of the Data PrincipalCh IVSpecial provisions
S.16 Transfer outside IndiaS.17 ExemptionsCh VData Protection Board of India
S.18 Establishment of the BoardS.19 Composition of the BoardS.20 Salary and term of officeS.21 DisqualificationsS.22 Resignation and vacanciesS.23 Proceedings of the BoardS.24 Officers and employeesS.25 Members as public servantsS.26 Powers of the ChairpersonCh VIBoard powers and procedure
S.27 Powers and functions of the BoardS.28 Procedure followed by the BoardCh VIIAppeal and dispute resolution
S.29 Appeal to the Appellate TribunalS.30 Tribunal orders as a decreeS.31 Alternate dispute resolutionS.32 Voluntary undertakingCh VIIIPenalties
S.33 Penalties and the ScheduleS.34 Penalties to Consolidated FundCh IXMiscellaneous
S.35 Good-faith protectionS.36 Power to call for informationS.37 Blocking of accessS.38 Consistency with other lawsS.39 Bar of jurisdictionS.40 Power to make rulesS.41 Laying of rules before ParliamentS.42 Power to amend the ScheduleS.43 Power to remove difficultiesS.44 Amendments to other ActsRight
This right lets a Data Principal have their personal data corrected, completed, updated or erased.
TL;DR
The right to correction and erasure (Section 12) lets a Data Principal have their personal data corrected, completed, updated or erased. A fiduciary must erase on request unless keeping the data is necessary for the specified purpose or required by another law.
A Data Principal shall have the right to correction, completion, updating and erasure of her personal data for the processing of which she has previously given consent, in accordance with any requirement or procedure under any law for the time being in force.
On request, a fiduciary must correct inaccurate data, complete what is incomplete, and update what has changed.
The person can also ask for erasure, and the fiduciary must erase the data unless keeping it is necessary for the specified purpose or required by another law.
You notify a service that your address changed and ask it to delete an old marketing profile. It must update the address and erase the profile unless a law requires retention.
Can I always get my data erased?
Usually, unless retention is necessary for the specified purpose or required by law.
What is the difference from retention limits?
Retention limits are the fiduciary's own duty to erase; this right lets you request it directly.
Consultant-led and partner-backed.