For individuals

Your data, your rights

If a business uses NoIdMe, your consent and rights are recorded with tamper-evident proof. Here are the rights India's DPDP Act 2023 gives you as a data principal.

DPDP Act 2023

What you can ask for

Access (§11)

A summary of what data is processed about you and who it's shared with.

Correction (§11)

Correct, complete or update inaccurate data.

Withdraw consent (§6)

As easy to withdraw as it was to give. Processing stops for that purpose.

Erasure (§12)

Have your data erased when it's no longer needed. With NoIdMe, erased means cryptographically unrecoverable.

Grievance (§13)

Raise a grievance and get a time-bound response.

Nominate (§14)

Nominate someone to exercise your rights on your death or incapacity.

How

Exercising your rights

Your rights are exercised with the business (Data Fiduciary)that collected your data. Look for their privacy notice or a "manage your data / privacy" link. If they run NoIdMe, they verify your identity (e.g. an OTP) and then your request flows through to a verifiable record.

NoIdMe is the processorbehind the scenes; we help fiduciaries honour your request, but we don't hold an independent relationship with you. For questions about this website specifically, email contact@noidme.com.

A hosted self-service rights portal for fiduciaries' end-users is on the roadmap; today rights are exercised through the fiduciary's own app.

Run a business? Honour these rights with proof.

NoIdMe records consent and rights requests with tamper-evident proof, so DPDP responses are verifiable, not just logged.