Skip to content
Certopact certopact
← Articles Compliance

DPDP data-principal rights: access, correction and erasure

6 Aug 2026 6 min read

India's Digital Personal Data Protection Act gives the individuals whose data you hold — Data Principals — a set of rights over that data. For a front desk collecting visitor details every day, that means being able to find, correct and delete a person's records on request, not just collect them.

The rights that matter at the front desk

  • Right to access — a person can ask what personal data you hold about them and how it is processed.
  • Right to correction — they can ask you to fix inaccurate or incomplete details.
  • Right to erasure — they can ask you to delete data you no longer have a lawful reason to keep.
  • Right to grievance redressal — a clear route to raise a concern.

Why paper makes this almost impossible

You can not honour a request you can not action. A paper logbook can not be searched for one person, can not selectively correct an entry, and can not delete a record without defacing the page. A structured system does all three in a few clicks — which is why digitising the desk is a prerequisite, not a nicety. See the DPDP Act and visitor data.

What being ready looks like

  • Find every record for a given individual quickly.
  • Correct details without disturbing the rest of the log.
  • Delete on request, and automatically at the end of your retention period.
  • Capture consent cleanly so the basis for processing is clear.

How Certopact helps

Certopact keeps visitor records structured, searchable and subject to configurable retention, with consent captured at collection — so responding to access, correction and erasure requests is practical. This is general information, not legal advice; confirm your specific obligations under the DPDP Act and its rules with your own counsel.

Stay in touch

Get a heads-up on new articles, customer stories and events from Certopact.

See Certopact verify a visitor in minutes.

Book a 30-minute demo. We'll walk through Entry, Access and offline verification on your use case.