Know Your Rights
A plain-language course for everyday people. Understand what the DPDP Act gives you, how consent really works, and exactly how to act when a company mishandles your data - no legal background needed.
Outcomes
Concrete capabilities you carry away - not just knowledge, but what to do with it.
Spot a weak or unlawful consent request
Send a rights request that gets a response
Escalate effectively if you're ignored
Keep your children's data safer online
The curriculum
About 45 minutes of focused study, each module tied to the sections it draws from.
Before you can use your rights, it helps to know what kind of law this is, what its key words mean, and where you sit inside it.
For years, what companies did with your personal data was governed only by a thin set of IT-Act rules. The Digital Personal Data Protection Act, 2023 - coming into force in stages from 2025 - is India's first dedicated law that treats your personal data as something you have rights over, not just an asset a company collects. It binds almost any organisation that handles the digital personal data of people in India, even one based abroad.
The Act runs on four roles. You are the Data Principal - the person the data is about. The company that decides why and how to use it is the Data Fiduciary. A vendor it hires to crunch that data is a Data Processor. And the Data Protection Board of India is the regulator that enforces it all.
A hospital (Fiduciary) hires a billing-software vendor (Processor) to email you (Principal) your invoice.
“It's just an app, so no one's really responsible.” Wrong - the Fiduciary always carries the legal duty, even for what its processors do.
The law gives you the right to be clearly told before your data is taken, to access what's held, to correct it, to have it erased, to raise a grievance, and to nominate someone to act for you. Everything else in this course is about using them in real life.
Takeaway - You're the Data Principal - the law exists to give you control, and the company holding your data owes you specific, enforceable duties.
Learn by doing
You've read your rights - now use them. Three quick drills to make consent, your rights and the key players click into place.
Real consent is free, specific and informed. Judge each request the way the law would.
An app shows one checkbox: “I agree to the Privacy Policy, Terms, marketing emails and sharing my data with partners.” You must tick it to sign up.
Use your privacy rights with confidence.
From a free DPDP risk check to a board-ready roadmap, Anix TrustStack helps you manage AI and DPDP together - securely and sustainably.