dpdpr.in

Section 13. Right of grievance redressal

DPDP Act, 2023 · Chapter III: Rights and Duties of Data Principal

In simple words

Companies and Consent Managers must give you an easy way to raise complaints. They must reply within the time set by the Rules. You must try this first before you go to the Board.

What this means for you
Complain to the company first. If you are not satisfied, you can then approach the Board.
What this means for businesses
Publish your grievance process. Rule 14(3) sets a maximum response period of ninety days.
Everyday example
A bank keeps sending you marketing messages after you withdrew consent. You first raise a grievance with the bank.
सरल शब्दों में (हिन्दी अनुवाद)

कंपनियों और सहमति प्रबंधकों को आपको शिकायत करने का आसान तरीका देना होगा। उन्हें नियमों में तय समय के भीतर जवाब देना होगा। बोर्ड के पास जाने से पहले आपको पहले यह रास्ता अपनाना होगा।

आपके लिए इसका मतलब
पहले कंपनी से शिकायत करें। अगर आप संतुष्ट नहीं हैं, तो उसके बाद बोर्ड के पास जा सकते हैं।
कारोबार के लिए इसका मतलब
अपनी शिकायत निवारण प्रक्रिया प्रकाशित करें। नियम 14(3) जवाब के लिए अधिकतम नब्बे दिन की अवधि तय करता है।
रोज़मर्रा का उदाहरण
सहमति वापस लेने के बाद भी एक बैंक आपको मार्केटिंग मैसेज भेजता रहता है। आप पहले बैंक के पास शिकायत दर्ज करते हैं।

This is our Hindi translation of the plain English summary above, not the official Hindi text of the Act. If they differ, the official text prevails.

Who it applies to

Data Fiduciaries, Consent Managers and Data Principals.

Related Rules

Related sections

Official textas notified

Source: MeitY copy of the Gazette (CG-DL-E-12082023-248045), page 10. Printed dashes are shown as colons; the wording is unchanged.

(1) A Data Principal shall have the right to have readily available means of grievance redressal provided by a Data Fiduciary or Consent Manager in respect of any act or omission of such Data Fiduciary or Consent Manager regarding the performance of its obligations in relation to the personal data of such Data Principal or the exercise of her rights under the provisions of this Act and the rules made thereunder.

(2) The Data Fiduciary or Consent Manager shall respond to any grievances referred to in sub-section (1) within such period as may be prescribed from the date of its receipt for all or any class of Data Fiduciaries.

(3) The Data Principal shall exhaust the opportunity of redressing her grievance under this section before approaching the Board.

On this page
  1. In simple words
  2. Who it applies to
  3. Related Rules
  4. Official text