A tenth of a percentis a hundred thousand requests.

At scale, rights handling is not a legal process. It is a product.

In one line: Sections 11 to 14 provide rights to access information, correction and erasure, grievance redressal and to nominate another person, alongside the right to withdraw consent.

The estate · TelecomHover to inspect

Rights without a product are a queue. Queues become complaints.

The scene

The grievance inbox received four hundred emails in the first week after a news story on data sharing. Each needed identity verification, a search across nine systems, and a reply. The team had two people.

Where the thinking breaks

The unclear thoughtWhat it breaksThe clearer thought
Rights requests will be rare. Awareness drives volume; one news cycle can multiply it. Plan capacity for a spike, not an average.
Email is fine for now. Unstructured requests make verification, tracking and timelines hard to prove. Build a self-service rights flow in the app.

Grievance first

DPDPA requires Data Principals to exhaust the fiduciary's grievance mechanism before approaching the Board. A good grievance product is the cheapest way to keep disputes out of adjudication.

Monday morning

  1. 01Estimate rights requests at 0.1% of subscribers.
  2. 02Map the systems each request must search.
  3. 03Scope an in-app rights flow.

Questions, answered plainly

What rights do Data Principals have under DPDPA?

Sections 11 to 14 provide rights to access information, correction and erasure, grievance redressal and to nominate another person, alongside the right to withdraw consent.

Must individuals complain to the company before the Data Protection Board?

Yes. Section 13 requires a Data Principal to exhaust the grievance redressal opportunity with the Data Fiduciary or consent manager before approaching the Board.

Sector · TelecomA billion subscribers. A billion Data Principals.Read → Telecom · Deep diveThe network's weakest node is a retailer's phone.Read → Telecom · Deep divePrepare for the letter before it arrives.Read →

Tell us where your data sits.We'll show you where the exposure is.

A partner replies within one working day, with a first view on your penalty exposure.

Speak to a partner