Section 12 — Right to correction and erasure of personal data

What this section requires

A Data Principal has the right to correction, completion, updating, and erasure of her personal data — for processing she previously consented to, including Section 7(a) voluntary-data processing — subject to whatever procedure another applicable law sets.

On a correction/completion/updating request, the Data Fiduciary must correct inaccurate or misleading data, complete incomplete data, and update it. On an erasure request, the Data Fiduciary must erase the data unless retention is necessary for the stated purpose or for legal compliance.

Who it applies to

Any Data Fiduciary holding personal data it processes on the Data Principal's consent — the same "consent relationship" scope as Section 11's access right.

Checklist

• Build request-intake channels for correction, completion, updating, and erasure, per the manner Rule 14 prescribes once in force.
• On a valid correction request, actually correct, complete, or update the record — not just log the request.
• On an erasure request, erase unless the purpose is still live or another law requires retention — and be able to justify the refusal if challenged.

Penalty exposure

No Schedule item names Section 12. Refusing a valid correction or erasure request without a lawful basis falls under the residual item 7 — up to ₹50 crore.

Implementation timeline

Not yet in force. Commences 13 May 2027, eighteen months after the DPDP Rules, 2025 were published (13 November 2025) — per the commencement notification G.S.R. 843(E).