Fiduciary obligations, Principal rights — read side by side
What you must do
i.
Notice & Consent Management
Plain-language notices, multi-purpose consent handling.
ii.
Security & Privacy Controls
RBAC, encryption, access control by design.
iii.
Data Retention
Configurable data retention policies.
iv.
Audit Trails & Reporting
Immutable logs, ready-made reports.
v.
Data & Grievance Management
Track and address data requests and grievances.
vi.
Child & Persons with Disability Consent
Supports lawful guardian consent for minors and persons with disabilities.
What they can exercise
i.
Right to Notice
Clear notice before data is processed.
ii.
Right to Access
View personal data & processing details.
iii.
Right to Manage Consent
Self-service portal to grant, deny, withdraw, regrant consent.
iv.
Data Right
Raise & track requests to correct, complete, update & erase data.
v.
Right to Grievance Redressal
Raise & track grievances to resolution.
vi.
Right to Nominate
Nominate another to exercise rights on their behalf.