In simple words
Every company must prominently publish the business contact of its Data Protection Officer, if it has one, or of a person who can answer questions about data. It must also include this in every response to a rights request.
- What this means for you
- You should easily find who to contact about your data.
- What this means for businesses
- Publish a contact on your website or app and include it in every rights response.
- Everyday example
- A food delivery app lists a privacy contact email on its help page.
Who it applies to
All Data Fiduciaries.
Related sections and Schedules
Official textas notified
Source: MeitY copy of the Gazette, page 27. Printed dashes are shown as colons; the wording is unchanged.
Every Data Fiduciary shall prominently publish on its website or app, and mention in every response to a communication for the exercise of the rights of a Data Principal under the Act, the business contact information of the Data Protection Officer, if applicable, or a person who is able to answer on behalf of the Data Fiduciary the questions of the Data Principal about the processing of her personal data.