§ Clause 3 — Statute of Duties & Rights

Fiduciary obligations, Principal rights — read side by side

The DPDP Act creates matching duties and entitlements. iConsent360 operationalises both halves in a single system.
Data Fiduciary Obligations

What you must do

i. Notice & Consent Management

Plain-language notices served before processing; consent recorded per purpose with notice version

ii. Security & Privacy Controls

RBAC, encryption, access control by design.

iii. Data Retention

Configurable retention rules per purpose, with review or deletion at expiry

iv. Audit Trails & Reporting

Immutable logs, ready-made reports.

v. Grievance Redressal Mechanism

Requests and grievances tracked to resolution with SLAs

vi. Child & Persons with Disability Consent

Verifiable guardian consent for minors and persons with disabilities

vii. Breach Intimation

Immediate notification to the Board and affected Data Principals, followed by a detailed report within 72 hours.

Data Principal Rights

What they can exercise

i. Right to Notice

Notice shown in plain language before data is processed

ii. Right to Access

Data Principal can view personal data and processing summary

iii. Right to Manage Consent

Self-service portal to grant, deny, withdraw and re-grant, as easily as it was given

iv. Right to Correction & Erasure

Requests raised, tracked and completed with a record

v. Right to Grievance Redressal

Grievances raised and tracked to resolution

vi. Right to Nominate

Nominee recorded to exercise rights on the Data Principal's behalf

See Every Obligation And Right Working In One System.

Book a Live Demo

See The Record, Not The Pitch.

Thirty minutes, screen-shared, using your consent scenarios not a canned demo. Bring your hardest case: multi-purpose consent, guardian consent for minors, or a withdrawal that has to propagate across four systems.