Grievance Redressal Officer
A grievance contact enables individuals to raise processing concerns and use the available redressal mechanism.
The framework requires an accessible process and contact details for the applicable DPO or another person able to answer processing questions. It does not impose the same job title on every fiduciary.
Practical application
Publish a working contact and track acknowledgement, investigation and response.
Common questions and examples
What response timeline applies to a DPDP grievance?
Rule 14(3) requires a published grievance response period that is reasonable and does not exceed 90 days. This concerns the grievance redressal system; it should not be described as a universal 90-day deadline for every access, correction or erasure request. Set owners and escalation steps for each request type.
What details should an organisation publish?
Publish business contact information for the DPO, if applicable, or a person able to answer questions about personal-data processing. Give individuals a usable route to raise a grievance and explain how it will be handled. Avoid publishing private identity documents or unnecessary personal contact details.
Related concepts
Official sources and editorial review
Prepared by DPDPA Shield. Explanations are plain-language summaries; the cited legislation controls. Last reviewed .
Put privacy knowledge into practice
Explore consent, data inventory and rights-request workflows with DPDPA Shield.