A Data Principal's right to know what data is collected, why, and with whom it has been shared.
The Right to Information about processing ensures Data Principals are informed about: what personal data is being collected, the specific purposes of processing, the identity of processors and other Fiduciaries data is shared with, and the rights available to them including how to exercise those rights and file complaints. This information must be provided proactively via the privacy notice at collection time, not merely on request.
Transparency is the foundation of DPDPA compliance. If Data Principals are not properly informed at the point of collection, all subsequent processing may be on an invalid legal basis, exposing you to penalties on every record collected.
A Kolkata edtech app must clearly inform parents at signup: "We collect your child's name, grade, and learning progress. Purpose: personalise lessons. Shared with: AI tutor provider XYZ. Rights: access, correct, erase, complain to DPB at dpb.gov.in."
Publishing a privacy policy is necessary but not sufficient. The right to information requires active, timely disclosure at the point of collection — not just a static document on your website footer.
DPDPA Shield automates Consent Management. See how →