A customer asks the service provider to see a summary of the personal data it holds about him and to correct inaccuracies. Under the DPDP Act, 2023, this is an exercise of the data principal's right to:

The DPDP Act, 2023 confers rights on the data principal, including the right to obtain a SUMMARY and brief of personal data processed (Section 12), and the right to CORRECTION and ERASURE of inaccurate or outdated personal data (Section 13), together with the right to grievance redressal (Section 14) and nomination (Section 15). The fiduciary must in turn provide these and address grievances. These rights are the operative teeth by which individuals control their data. Alongside consent (Section 6), they define the principal-fiduciary relationship.