Data Principals have the right to access a summary of their data, request correction or erasure, nominate another person, and raise grievances. For children, the parent or lawful guardian acts as the Data Principal. ConsentX captures and proves each Data Principal's consent and runs the DSAR and grievance workflow that fulfils these rights.
In ConsentX
Related terms
Under India's DPDPA, a Data Fiduciary is the entity that decides why and how personal data is processed, equivalent to a 'controller' under the GDPR.
A DSAR is a request by an individual to access, correct, delete or port the personal data an organisation holds about them, which must be answered within a statutory deadline.
The DPDPA (DPDP Act 2023) is India's national data-protection law, requiring clear notice and free, specific, informed consent before processing personal data, with the DPDP Rules notified on 13 November 2025.