Rule 14Exercising Rights & Grievance Timelines
Manner of exercising rights of access, correction and erasure
What the Rule sets out
A Data Fiduciary must publish an accessible means (in-app, on a website, or another prescribed channel) through which a Data Principal can submit access, correction, and erasure requests, and must respond within a prescribed reasonable timeframe proportionate to the nature of the request.
What this means in practice
- A single rights-request intake form covering access, correction, erasure and consent-withdrawal in one place is the cleanest way to satisfy this and keep your SLA tracker simple.
Summarised for practical use from the publicly notified DPDP Rules, 2025. Confirm exact clause text against the official Gazette notification before relying on it for compliance decisions.