Chapter III: Rights and Duties of Data Principal

Section 13: Right of grievance redressal

←Sec. 12: Right to correction and erasure of personal dataSec. 12 Sec. 14: Right to nominateSec. 14→

Simple Explanation

Section 13 ensures that Data Principals have a way to resolve complaints: 1. Internal Grievance Mechanism: Every Data Fiduciary and Consent Manager must provide an accessible way for individuals to raise grievances. 2. Time-bound Response: They must respond within a period prescribed by rules. 3. Exhaustion Requirement: Before going to the Data Protection Board, the individual must first try to resolve the issue through the company's internal grievance process. This creates a two-tier system: first approach the company, then escalate to the Board if unsatisfied.

Key Points

✓Right to a grievance redressal mechanism
✓Data Fiduciary must respond within a prescribed time
✓Must exhaust internal redressal before approaching the Board
✓Applies to both Data Fiduciaries and Consent Managers

Official Text (Summary)

A Data Principal has the right to readily available means of grievance redressal provided by a Data Fiduciary or Consent Manager. The Data Fiduciary or Consent Manager must respond within a prescribed period. The Data Principal must exhaust this internal redressal mechanism before approaching the Board.

Source: The Digital Personal Data Protection Act, 2023 (No. 22 of 2023), Ministry of Law and Justice.

More Sections in Chapter III

Sec. 11 Sec. 12 Sec. 13 Sec. 14 Sec. 15

All Chapters

I. Preliminary II. Obligations of Data Fiduciary III. Rights and Duties of Data Principal IV. Special Provisions V. Data Protection Board of India VI. Powers, Functions and Procedure to be Followed by Board VII. Appeal and Alternate Dispute Resolution VIII. Penalties and Adjudication IX. Miscellaneous

Is your business DPDP compliant?

Avoid penalties up to ₹250 Crore. Let our experts help you implement consent management, grievance redressal, and data protection measures.

Get a Free Compliance Audit