DPDP Glossary
Right to Correction and Erasure
The right to seek correction, completion, updating and erasure of personal data in accordance with the Act.
Section 12
What it means
Section 12 lets a Data Principal seek correction of inaccurate or misleading personal data, completion of incomplete data, updating of personal data, and erasure in accordance with the Act. Erasure interacts with retention: other law may require keeping data even when the Principal prefers deletion.
Worked example
A customer whose address changed should be able to get the CRM updated (correction/update). Asking to erase invoices still required under tax law should meet a documented retention exception — not a silent ignore, and not an unlawful delete.
In practice
Wire correction and erasure into systems of record and processors. Authenticate requesters appropriately. Log outcomes and legal-hold decisions.
Source
Section 12 · Official text (PDF)
Educational summary based on the Digital Personal Data Protection Act, 2023 and Rules, 2025. Not legal advice.
Further reading
Data PrincipalThe individual to whom the personal data relates.ErasureRemoval of personal data when it is no longer necessary for the specified purpose, subject to legal retention requirements and Section 12 requests.Right to AccessThe right to obtain a summary of personal data being processed and related processing information under the Act.