Consent you can prove.
Rights requests answered on time.
PrivacyOps runs the Data Principal side of India's Digital Personal Data Protection Act, 2023 for any organisation that is a Data Fiduciary: notices, consent, withdrawals, and requests to access, correct or erase data.
{
"seq": 1842,
"subject_ref": "ps_9c41…e07a",
"purpose": { "code": "marketing.whatsapp", "name": "Send offers on WhatsApp" },
"state": "withdrawn",
"notice": { "slug": "main", "version": 3 },
"language": { "requested": "ta", "shown": "ta" },
"channel": "portal",
"prev_hash": "5b0e…91c2",
"kid": "k4f20aa71"
}
hash d81f…3a90
signature Ed25519, verifies with the published key
Consent and notices
- Notice builder with sector templates; legal wording stays flagged until counsel approves
- English and the 22 Eighth Schedule languages, each reviewed before it goes live
- Purpose-by-purpose consent; withdrawing is one step
- Real-time decision API; withdrawals pushed to every processor and tracked to acknowledgement
- Verifiable guardian consent for children; no tracking or targeted ads for under-18s
- Cookie banner with equal Accept and Reject, and a proof-of-consent log
Rights of Data Principals
- Access, correction, completion, updating, erasure, grievance and nomination
- Identity check by sign-in, one-time code or staff review
- Deadlines per request type, capped at the 90 days the DPDP Rules, 2025 allow
- Erasure that withdraws consent and tasks every processor
- Responses delivered in the privacy centre, with the route to the Data Protection Board
- Reports on volumes and on-time rates for your board