DPDP reference
Section 12: Right to correction and erasure of personal data
Last checked 6 Nov 2026
A Data Principal may have her personal data corrected, completed, updated and erased, for data she gave consent for, including under s.7(a) (s.12(1)). On a request the Data Fiduciary corrects inaccurate or misleading data, completes incomplete data and updates it (s.12(2)).
On an erasure request the Data Fiduciary erases the data unless retention is necessary for the specified purpose or to observe a law (s.12(3)).
- Applies to
- Every Data Fiduciary, of any size, unless an exemption in s.17 applies.
- Starts
- 13 May 2027 (G.S.R. 843(E), item (c)).
- Penalty
- Up to ₹50 crore (s.33, Schedule item 7).
- Source
- Digital Personal Data Protection Act, 2023 (22 of 2023), section 12; G.S.R. 843(E), commencement
Questions
Can a business refuse an erasure request?
Where retention is necessary for the specified purpose or to observe a law in force (s.12(3)).
Related
- Section 11: Right to access information about personal data
- Section 8: General obligations of Data Fiduciary
- Rule 14: Rights of Data Principals
Next
Not legal advice.