Section 13, DPDP Act [S10-N9E]
As at 7 September 2026. Not commenced. Commencement appointed for 13 May 2027 by Notification G.S.R. 843(E): phased commencement of the Digital Personal Data Protection Act, 2023 [N11-6ZG].
13. Right of grievance redressal.—(1) A Data Principal shall have the right to have readily available means of grievance redressal provided by a Data Fiduciary or Consent Manager in respect of any act or omission of such Data Fiduciary or Consent Manager regarding the performance of its obligations in relation to the personal data of such Data Principal or the exercise of her rights under the provisions of this Act and the rules made thereunder.
(2) [The Data Fiduciary or Consent Manager shall respond to any grievance within such period as may be prescribed from the date of its receipt.]
(3) The Data Principal shall exhaust the opportunity of redressing her grievance under this section before approaching the Board.
Defined terms in this text (5)
Consent Manager: Section 2(g), DPDP Act: "Consent Manager" means a person registered with the Board, who acts as a single point of contact to enable a Data Principal to give, manage, review and withdraw her consent through an accessible, transparent and interoperable platform;
data: Section 2, DPDP Act [S10MZ3] (In this Act, unless the context otherwise requires,— [...]): "data" means a representation of information, facts, concepts, opinions or instructions in a manner suitable for communication, interpretation or processing by human beings or by automated means
data: 5 more definitions.
Data Fiduciary: Section 2, DPDP Act [S10MZ3] (In this Act, unless the context otherwise requires,— [...]): "Data Fiduciary" means any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data
Data Fiduciary: 3 more definitions.
Data Principal: Section 2, DPDP Act [S10MZ3] (In this Act, unless the context otherwise requires,— [...]): "Data Principal" means the individual to whom the personal data relates and, where such individual is a child, includes the parents or lawful guardian, and where a person with disability, includes her lawful guardian acting on her behalf [...]
personal data: Section 2, DPDP Act [S10MZ3] (In this Act, unless the context otherwise requires,— [...]): "personal data" means any data about an individual who is identifiable by or in relation to such data
personal data: 3 more definitions.
Made under this section, or naming it (0)
none
Cited by (1)
Section 5, DPDP Act [S10-N2R], 11 August 2023, Band A. "section 13".
Not held (0)
none
Duties published under this section (0)
none