DPDP Glossary

Right to Access

The right to obtain a summary of personal data being processed and related processing information under the Act.

Section 11

What it means

Section 11 allows a Data Principal to obtain a summary of personal data being processed and related processing information, including identities of other Data Fiduciaries and Data Processors with whom the personal data has been shared, subject to the Act. It is transparency into what is held and how it moves — not an unlimited dump of every system log.

Worked example

A Principal asks which vendors received their KYC data for onboarding. A Section 11-ready Fiduciary can summarise categories processed and sharing recipients from a living processing inventory — not invent the answer from memory during the ticket.

In practice

Maintain searchable inventories and a verified intake process. Define what “summary” means operationally so responses are consistent and complete enough to meet the right.

Source

Section 11 · Official text (PDF)

Educational summary based on the Digital Personal Data Protection Act, 2023 and Rules, 2025. Not legal advice.

Further reading

Data PrincipalThe individual to whom the personal data relates.Right to Correction and ErasureThe right to seek correction, completion, updating and erasure of personal data in accordance with the Act.Right of Grievance RedressalThe right to readily available means of grievance redressal provided by a Data Fiduciary or Consent Manager.

← Back to glossary