Rows of server units with blue status lights

Your documents, your rights

Your documents. Your rights.

Under India’s data protection Act, anyone who holds your personal data must ask for clear consent, protect it, and correct or erase it when you ask.

Photo: panumas nikhomkhai · Pexels

In short

  • Section 5: a request for consent comes with a notice saying what data is taken and why.
  • Section 6: consent must be free, specific, informed, unconditional and unambiguous, and limited to the data needed for that purpose.
  • Section 8(5): the holder must take reasonable security safeguards to prevent a personal data breach.
  • Section 8(7): data is erased when you withdraw consent or the purpose is served, unless a law requires it to be kept.
  • Sections 11 and 12: you may ask what is held, and have it corrected, completed, updated or erased.
  • Sections 13 and 14: you are entitled to a readily available way to raise a grievance, and may nominate someone to act for you.

The official wording

The consent given by the Data Principal shall be free, specific, informed, unconditional and unambiguous with a clear affirmative action, and shall signify an agreement to the processing of her personal data for the specified purpose and be limited to such personal data as is necessary for such specified purpose.
Source: Digital Personal Data Protection Act, 2023 (Ministry of Electronics and IT) · seen 21 September 2026

Not legal advice. This page repeats an official source as read on 21 September 2026. Rules change: open the source before you act. GetJobVia is a coordination platform, not a recruiting agent.