Skip to content
🚨 DPDP Rules 2025: Compliance Deadline 42 weeks awayRead handbook →
DPDP Guard

Exercise your rights

Submit a Data Subject Request to access, correct, or erase the personal data an organization holds about you.

What this is, and why it matters

India’s Digital Personal Data Protection Act, 2023 gives you — a Data Principal — the right to ask any organization that processes your personal data (a Data Fiduciary) to:

  • Access a summary of the data it holds about you and the list of processors it’s shared with (§11),
  • Correct inaccurate or outdated data, or update it (§12),
  • Erase your data once it’s no longer needed for the purpose it was collected for (§12), or
  • Ask questions related to a nominee you’ve registered for your account.

The Exercise Your Rights page turns this into a guided, three-step wizard instead of a bare form, so you always know which right you’re using, what you’ll get back, and by when.

Before you start

  • You need an account with at least one organization that has captured your consent, or that you already have an open request with — the wizard uses this to know which organizations you can file a request against.
  • If you’re a member of more than one organization’s user base, have the organization name handy — you’ll be asked to pick it.

Steps

  1. From your dashboard, select Exercise My Rights.

    Screenshot: Data Principal dashboard with the “Exercise My Rights” button highlighted Caption: the Data Principal dashboard, with the primary “Exercise My Rights” call-to-action visible in the sidebar/quick-actions area.

  2. Choose a right. Pick one of the four cards — Access, Share (who it’s shared with), Correct, or Erase — each shown with its DPDP Act section and a plain-language description of what you’ll receive. If you belong to more than one organization, select which one the request is for.

    Screenshot: step 1 of the wizard, showing the four right cards and the organization selector Caption: the four DSR right cards (Access / Share / Correct / Erase), one selected and highlighted in teal, with the organization dropdown below.

  3. Add details. Each right asks for something different — e.g. what you want corrected, or why you’re requesting erasure. A tooltip next to the field explains why the organization needs this information. This field is optional but speeds up processing.

    Screenshot: step 2 of the wizard, the details textarea with its explanatory tooltip open Caption: the free-text details field for the selected right, with the “why we ask this” tooltip visible.

  4. Review & confirm. Check the right, legal basis, organization, and the details you entered, then tick the confirmation checkbox stating the request is about your own data and the details are accurate. Select Submit request.

    Screenshot: step 3 of the wizard, the review table and confirmation checkbox Caption: the review screen listing Right / Legal basis / Organization / Details, with the confirmation checkbox and “Submit request” button.

  5. You’ll land on a confirmation screen summarizing what you’ll receive and reminding you of the response deadline. From here you can file another request or go straight to View my requests.

    Screenshot: success screen after submitting a request Caption: the post-submit confirmation card with a green checkmark, “What happens next” panel, and the two follow-up buttons.

What happens next

Once submitted, the organization must respond within its published timeline — up to 90 days under the DPDP Act. Your request appears in the Your requests list on this page with a live status badge (open / completed), and a Response overdue or Due soon flag if the deadline is approaching or has passed. You don’t need to follow up manually — check back on this page any time to see the current status.