I’m Sharing My Data — What Are My Rights & Duties?

---

Q: Do I have the right to know what data is collected about me?

Yes. You can request a summary of your personal data being processed, the purpose for which it is used, and the names of all organisations it has been shared with.

---

Q: Can I correct my data if it’s wrong?

Yes. You have the right to correct inaccurate or incomplete data and to erase data that is no longer needed for the purpose it was collected.

---

Q: Can I take back my consent?

Yes — at any time. Withdrawing consent must be as easy as giving it. Once withdrawn, the organisation must stop processing your data within a reasonable time.

---

Q: What if I have a complaint?

Every Data Fiduciary must provide a readily available grievance redressal mechanism. If unresolved, you can escalate your complaint to the Data Protection Board of India.

---

Q: What happens to my data if I die or become incapacitated?

You can nominate another individual in advance to exercise your data rights on your behalf in the event of your death or incapacity.

---

Q: Do I have any duties too?

Yes. Rights come with responsibilities. As a Data Principal you must not:

• Provide false or impersonated information
• Suppress material information when applying for government documents or benefits
• File false or frivolous complaints with a Data Fiduciary or the Board
• Submit unverifiable information when requesting correction or erasure

Breach of these duties can attract a penalty of up to ₹10,000.

---

Q: Can a child exercise these rights?

A minor’s rights are exercised by their parent or lawful guardian. Organisations must obtain verifiable parental consent before collecting a child’s data, and cannot track, monitor, or target advertising at children.

---