DPDP reference
Section 11: Right to access information about personal data
Last checked 6 Nov 2026
A Data Principal who gave consent, including under s.7(a), may ask for a summary of her personal data and the processing, the identities of all other Data Fiduciaries and Data Processors it was shared with along with a description of what was shared, and any other prescribed information (s.11(1)).
The second and third items do not apply to sharing with a Data Fiduciary authorised by law on a written request to prevent, detect or investigate offences or cyber incidents, or to prosecute or punish offences (s.11(2)).
- Applies to
- Every Data Fiduciary, of any size, unless an exemption in s.17 applies.
- Starts
- 13 May 2027 (G.S.R. 843(E), item (c)).
- Penalty
- Up to ₹50 crore (s.33, Schedule item 7).
- Source
- Digital Personal Data Protection Act, 2023 (22 of 2023), section 11; G.S.R. 843(E), commencement
Questions
What can a person ask for under section 11?
A summary of her personal data and the processing, who it was shared with and a description of what was shared, and any other prescribed information (s.11(1)).
Related
- Section 12: Right to correction and erasure of personal data
- Section 13: Right of grievance redressal
- Rule 14: Rights of Data Principals
Next
Not legal advice.