If I need to delete or withdraw my consent, what are the steps and to whom do I have to put the request for this?

Viewed 126

What if someday I get up and want to withdraw or delete my consent which I gave to a particular company, what will I do? What steps should I take? and how many days are needed to do this?

1 Answers

Steps to Withdraw Consent Under DPDPA-

Identify the Data Fiduciary (Company): Check your emails or the company’s website/app to find information on how to manage your consent. Companies usually have a Privacy Policy or Consent Management Dashboard or Find the contact information of the company’s Data Protection Officer (DPO) or designated contact point, usually mentioned in the privacy notice or on their website.

Submit Your Request: Clearly state that you wish to withdraw your consent. Mention details like your name, contact information, and the specific consent you want to revoke.

Receive Confirmation: The company should acknowledge your request and take action to stop processing your personal data for that specific purpose.

Deletion of Data: You can also request the deletion of your data if it’s no longer necessary for the purpose for which it was collected.

Time Frame-

The DPDPA mandates that the Data Fiduciary must cease processing the data immediately after the withdrawal of consent. They should also notify third parties with whom the data was shared to stop further processing.

If the company fails to comply, you can escalate the issue to the Data Protection Board of India (DPBI).