SCENARIO S04 · RIGHTS & GRIEVANCES
A person asks for access, correction and erasure in one message. What workflow is relevant?
IN PLAIN ENGLISH
Why you are seeing this step
This field note uses one realistic decision to separate the official source, an editorial interpretation, a practical option, evidence to keep, and any uncertainty that still depends on your facts.
Educational only, not legal advice. Source status is dated 13 May 2027; inspect the official links below before relying on it.
BEST NEXT STEP
Verify the request and route each part through the published rights process.
Use one case record, but classify each requested outcome and document identity, response, retention constraints and closure.
WHY THE OTHER INSTINCTS MISS
Verify the request and route each part through the published rights process.
Correct. Access, correction/completion/updating and erasure have distinct provisions and may require different factual checks.
Treat the message only as a grievance.
A grievance route does not replace the substantive rights workflows raised in the request.
Erase first and investigate identity afterwards.
Verification and other applicable retention duties need to be handled before an irreversible action.
BUILD THIS EVIDENCE
Rights case record with verified identity, requested outcomes, decisions, response and retained-data rationale.
This artefact supports review. It does not certify compliance or replace advice on your facts.
- Guidance type
- legal requirement
- Pinpoint
- Act ss. 11–13; Rule 14(1)–(2); G.S.R. 843(E) and 846(E)
- Reviewed
- 2026-08-30
- Change note
- Status and pinpoint reviewed against the official Act, final Rules, commencement notification and corrigendum for this educational website.
OFFICIAL SOURCE TRAIL
Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) ↗
Definitions and specified machinery provisions are operative; most substantive duties and rights are notified for later commencement. Check each scenario's status record.
Act s. 1(2); provision-specific section pinpointsDigital Personal Data Protection Rules, 2025 (G.S.R. 846(E)) ↗
Final Rules with phased commencement. Scenario pinpoints identify the particular Rule being taught.
Rule 1(2)–(4), read with the corrigendumDPDP Act commencement notification G.S.R. 843(E) ↗
Appoints immediate, one-year and eighteen-month commencement cohorts for the Act.
G.S.R. 843(E), clauses (a)–(c)