DPDP reference

Section 13: Right of grievance redressal

Last checked 6 Nov 2026

A Data Principal has the right to readily available means of grievance redressal from a Data Fiduciary or Consent Manager (s.13(1)), with a response within the prescribed period (s.13(2)). She must exhaust this route before approaching the Board (s.13(3)). Rule 14(3) sets the outer limit at ninety days.

Applies to
Every Data Fiduciary and every Consent Manager.
Starts
13 May 2027 (G.S.R. 843(E), item (c)).
Penalty
Up to ₹50 crore (s.33, Schedule item 7).
Source
Digital Personal Data Protection Act, 2023 (22 of 2023), section 13; G.S.R. 843(E), commencement

Questions

How long does a business have to answer a DPDP grievance?

The period it publishes, which may not exceed ninety days (Rule 14(3)).

Can a person go straight to the Board?

She must first exhaust the opportunity of redressing the grievance with the Data Fiduciary or Consent Manager (s.13(3)).

Related

Next

Join early access

Not legal advice.