India's data privacy era is here. Be the firm that leads your clients through it. Join the truConsent Partner Program →
    All Modules
    Module 03 Mandatory (M)

    Rights Center

    A complete, interoperable portal for every Data Principal right the DPDP Act requires.

    Overview

    The Rights Center is the interface between your platform and your Data Principals' rights. It provisions the four exercisable rights under the DPDP Act — Access, Erasure, Withdrawal and Nomination — through a branded, embeddable portal. When a Data Principal exercises a right, the request is routed, tracked against the statutory timeline, and fulfilled with an auditable evidence trail.

    Withdrawal propagates directly through the Consent Engine, stopping processing downstream immediately. Access and deletion requests are fulfilled against data located by DPDP Navigator. The portal integrates with Consent Manager interoperability requirements for platforms that serve multiple Data Fiduciaries.

    Rights Center — Data principal rights fulfilment

    Capabilities

    What's inside

    Right to Access — Sec 11(1)

    Data Principals can request a view of all personal data held about them. Requests are routed, fulfilled against your mapped data stores, and responded to within the statutory timeline — with a structured export as evidence.

    Right to Delete / Erasure — Sec 12(3)

    Deletion requests are validated against your data map and executed across all relevant systems. A deletion confirmation receipt provides evidence of complete erasure.

    Right to Withdraw — Sec 6(4)

    One-click withdrawal propagates immediately to the Consent Engine and all downstream processing systems — ensuring processing stops the moment consent is revoked.

    Right to Nominate — Sec 14(1)

    Data Principals can designate a representative to exercise rights on their behalf. Nomination is verified, documented, and maintained with a full audit trail.

    Grievance Management

    Structured complaint intake with routing, owner assignment, SLA tracking, and resolution logging. Optional grievance portal display. Produces a grievance register for regulatory inspection.

    Interoperable Portal

    The Rights Center portal — with Consent, Rights, Nominee, Grievance, and DPO tabs — can be embedded, linked, or accessed via Consent Manager interoperability APIs. Available in all 22 Eighth Schedule languages.

    Optional Components

    Transparency Statements, DPO contact display (per Section 30), and API-based integrations — each configurable independently per deployment.

    Explore other modules

    Module 01
    DPDP Navigator
    Discover where personal data lives across your technology stack before you build your compliance programme.
    Module 02
    Consent Engine
    The most configurable DPDPA-native consent management available, covering every consent scenario the Act requires.
    Module 04
    Compliance Center
    Policy management and breach response, with AI doing the heavy lifting and humans making the decisions.
    Module 05
    Audits & Assessments
    Give your auditors the tools they need and keep your compliance posture current between reviews.
    Module 06
    Data Processor Management
    Manage every Data Processor relationship the DPDP Act holds you accountable for.
    Module 07
    Security Safeguards
    Build and demonstrate the reasonable security safeguards Section 8(5) requires.

    Ready to Achieve DPDPA Compliance?

    Be among the first to implement comprehensive DPDPA compliance

    Newsletter

    Subscribe to our newsletter and stay updated on DPDPA compliance insights.

    By subscribing, you agree to receive updates from TruConsent.Unsubscribe anytime.
    Protected by reCAPTCHA