Section 12: Right to correction and erasure of personal data
←Sec. 11: Right to access information about personal dataSec. 11Sec. 13: Right of grievance redressalSec. 13→
Simple Explanation
Section 12 grants Data Principals control over the accuracy and existence of their data:
1. Correction: You can ask for inaccurate or misleading data to be corrected.
2. Completion: You can ask for incomplete data to be completed.
3. Updating: You can request your data to be updated.
4. Erasure (Right to be Forgotten): You can request deletion of your personal data.
However, the Data Fiduciary can refuse erasure if:
• The data is still needed for the original purpose.
• The law requires the data to be retained (e.g., banking records must be kept for 10 years).
Key Points
- ✓Right to correct inaccurate or misleading data
- ✓Right to complete incomplete data
- ✓Right to update outdated data
- ✓Right to erasure (right to be forgotten)
- ✓Erasure can be refused if required by law or for the specified purpose
Official Text (Summary)
A Data Principal has the right to request correction, completion, updating, and erasure of their personal data. The Data Fiduciary must correct inaccurate or misleading data, complete incomplete data, and update data upon request. Erasure must be carried out unless retention is necessary for the specified purpose or for compliance with any law.
Source: The Digital Personal Data Protection Act, 2023 (No. 22 of 2023), Ministry of Law and Justice.
Jump to any Section
More Sections in Chapter III
All Chapters
Is your business DPDP compliant?
Avoid penalties up to ₹250 Crore. Let our experts help you implement consent management, grievance redressal, and data protection measures.
Get a Free Compliance Audit