Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Data Analytics and Law

A Bengaluru analytics firm, acting as a Data Fiduciary, uses a customer's personal data for profiling after obtaining her consent. The customer later finds her address in the records is wrong and asks the firm to correct it. Under the Digital Personal Data Protection Act, 2023, what must the firm do?

The firm must correct the inaccurate or misleading address when the customer requests it. The Digital Personal Data Protection Act, 2023 gives a Data Principal the right to correction, completion, updating and erasure, and a Data Fiduciary receiving such a request shall correct the data without needing a court order.

  1. ARefuse, because consent once given cannot be revisited
  2. BCorrect the inaccurate or misleading personal data on receiving the requestCorrect
  3. COnly add a note, since correction is allowed solely by a court order
  4. DErase all her data, because correction is not provided for

Explanation

Section 12 gives a Data Principal the right to correction, completion, updating and erasure of personal data processed on her consent. On a request for correction, the Data Fiduciary shall correct the inaccurate or misleading data. No court order is required, and erasure is a separate right with its own conditions.

Did you get it right without looking?

One question tells you little. A timed set on Data Analytics and Law shows your real accuracy, how long you take and where you lose marks.

Practise Data Analytics and LawFree diagnostic mock

More Data Analytics and Law questions