Glossary
What is correction under DPDP?
Correction lets a Data Principal fix, complete or update personal data a Data Fiduciary holds about them.
Definition
Correction is the Data Principal's right under s.12 of the DPDP Act, 2023 to have personal data corrected, completed and updated, alongside the right to erasure. It pairs with the Data Fiduciary's duty under s.8(3) to keep personal data complete and accurate where it is used for decisions or disclosed.
What it means
A Data Principal can ask you to fix wrong data, fill in what is missing, or bring it up to date (s.12). Requests come through the means you publish under Rule 14, with the identifier you ask for.
Accuracy is also your own duty: where personal data is used for decisions or disclosed, s.8(3) requires it to be complete and accurate.
Where it appears in the Act and Rules
| Provision | What it says |
|---|---|
| s.12 | Right to correction, completion, updating and erasure |
| s.8(3) | Completeness and accuracy when data is used for decisions or disclosed |
| s.13 | Grievance redressal if a request is not handled |
| Rule 14 | Publish how to make requests and the identifier needed |
Common misconceptions
- “Correction only covers typos.” s.12 also covers completing and updating personal data.
- “Accuracy is the Data Principal's problem.” s.8(3) puts a completeness and accuracy duty on the Data Fiduciary where data is used for decisions or disclosed.
- “There is nowhere to go if a correction is refused.” The Data Principal can raise a grievance under s.13, and approach the Board after exhausting it (s.13(3)).
Related terms
Deleting personal data on request or when the purpose ends (s.8(7), s.12).
Data Principal rightsAccess, correction, erasure, grievance redressal and nomination (ss.11 to 14).
Grievance redressalThe fiduciary's complaint process, used before the Board (s.13).
Data PrincipalThe individual the personal data relates to (s.2).
In TruePrivacy
Correction is one of the request types in Data Principal requests, alongside access, erasure, consent withdrawal and nomination. Identity is verified before work starts, tasks go to connected systems, and each step is kept in the audit trail. Data Principals can file requests through your privacy center.
What can a Data Principal ask to correct?
Under s.12, they can ask for personal data to be corrected, completed or updated, and can also ask for erasure.
Is accuracy also a Data Fiduciary duty?
Yes. Under s.8(3), personal data must be complete and accurate where it is used for decisions or disclosed.
How does a Data Principal ask for a correction?
Through the means the Data Fiduciary publishes under Rule 14, with the identifier it asks for. If unhappy with the outcome, they can raise a grievance under s.13.
Your DPDP plan, starting today
Core obligations for data fiduciaries begin on 13 May 2027.
Core obligations begin