Chapter 3 · Rights & Duties of Data Principal
Section 13 - Right of grievance redressal
A readily available means to raise complaintsEvery Fiduciary - and every Consent Manager - must give you an easy, readily available way to raise complaints about how they handle your data or your rights, and must respond within the time the Rules set.
Download full Act (PDF)In plain English
Every Fiduciary - and every Consent Manager - must give you an easy, readily available way to raise complaints about how they handle your data or your rights, and must respond within the time the Rules set. You are expected to use this channel first: only after exhausting it can you take the matter to the Data Protection Board.
Key points
- Fiduciaries and Consent Managers must provide a readily available grievance mechanism.
- They must respond within the period prescribed by the Rules.
- You must exhaust this channel before approaching the Board.
Official section text
Section 13. Right of grievance redressal.
A Data Principal shall have the right to have readily available means of grievance redressal provided by a Data Fiduciary or Consent Manager in respect of any act or omission of such Data Fiduciary or Consent Manager regarding the performance of its obligations in relation to the personal data of such Data Principal or the exercise of her rights under the provisions of this Act and the rules made thereunder.
The Data Fiduciary or Consent Manager shall respond to any grievances referred to in sub-section (1) within such period as may be prescribed from the date of its receipt for all or any class of Data Fiduciaries.
The Data Principal shall exhaust the opportunity of redressing her grievance under this section before approaching the Board.