Section 11, DPDP Act [S10-N7J]
As at 7 September 2026. Not commenced. Commencement appointed for 13 May 2027 by Notification G.S.R. 843(E): phased commencement of the Digital Personal Data Protection Act, 2023 [N11-6ZG].
(1) The Data Principal shall have the right to obtain from the Data Fiduciary to whom she has previously given consent, including consent as referred to in clause (a) of section 7, upon making to it a request in such manner as may be prescribed —
(a) a summary of personal data which is being processed by such Data Fiduciary and the processing activities undertaken by that Data Fiduciary with respect to such personal data;
(b) the identities of all other Data Fiduciaries and Data Processors with whom the personal data has been shared by such Data Fiduciary, along with a description of the personal data so shared; and
(c) any other information related to the personal data of such Data Principal and its processing, as may be prescribed.
(2) Nothing contained in clause (b) or clause (c) of sub-section (1) shall apply in respect of the sharing of any personal data by the Data Fiduciary with any other Data Fiduciary authorised by law to obtain such personal data, where such sharing is pursuant to a request made in writing by such other Data Fiduciary for the purpose of prevention or detection or investigation of offences or cyber incidents, or for prosecution or punishment of offences.
Defined terms in this text (5)
data: Section 2, DPDP Act [S10MZ3] (In this Act, unless the context otherwise requires,— [...]): "data" means a representation of information, facts, concepts, opinions or instructions in a manner suitable for communication, interpretation or processing by human beings or by automated means
data: 5 more definitions.
Data Fiduciary: Section 2, DPDP Act [S10MZ3] (In this Act, unless the context otherwise requires,— [...]): "Data Fiduciary" means any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data
Data Fiduciary: 3 more definitions.
Data Principal: Section 2, DPDP Act [S10MZ3] (In this Act, unless the context otherwise requires,— [...]): "Data Principal" means the individual to whom the personal data relates and, where such individual is a child, includes the parents or lawful guardian, and where a person with disability, includes her lawful guardian acting on her behalf [...]
offence: Section 3, General Clauses Act, 1897 [S100SN] (In this Act, and in all Central Acts and Regulations made after the commencement of this Act, unless there is anything repugnant in the subject or context): "offence" shall mean any act or omission made punishable by any law for the time being in force
offence: 27 more definitions.
personal data: Section 2, DPDP Act [S10MZ3] (In this Act, unless the context otherwise requires,— [...]): "personal data" means any data about an individual who is identifiable by or in relation to such data
personal data: 3 more definitions.
Made under this section, or naming it (0)
none
Cited by (0)
none
Not held (0)
none
Duties published under this section (0)
none