If you asked a company to delete your data and the deadline passed with no action, you escalate in two steps under the DPDP Act 2023: (1) send a final legal notice citing Sections 12 & 13 with a short final deadline, and (2) if still ignored, file a complaint with the Data Protection Board of India. Our free generator drafts both documents from a short form.
India's Digital Personal Data Protection Act, 2023 gives you a real right to have your personal data erased. But a right is only as good as what you do when a company ignores it. If your deletion request has gone unanswered past the deadline, here's exactly how to turn up the pressure — properly, in writing, and on the record.
What the DPDP Act actually gives you
Three things matter here, and it's worth being precise so your notice carries weight:
- Section 12 — Right to erasure. You can require a company (a "Data Fiduciary") to erase your personal data, unless it's legally required to keep it.
- Section 13 — Grievance redressal. Every company must give you a way to raise a grievance, and must respond. You're expected to use this route first.
- Complaint to the Data Protection Board of India. If the company still doesn't act, you can complain to the Board, which can investigate and impose monetary penalties on the company.
Be realistic about the remedy. The DPDP Act is about accountability, not compensation — unlike the EU's GDPR, it does not let you personally sue the company for damages. The leverage is the Board's penalty power and the reputational cost of a complaint. That's still real leverage: no company wants a regulator's file open against it.
The escalation, step by step
Confirm the deadline has lapsed
Note the date you sent your erasure request and check that the statutory period has passed with no erasure and no meaningful response. Keep your original request, any acknowledgement, and the dates — this chronology is the backbone of everything that follows.
Send a final legal notice
A short, formal notice to the company's grievance officer / Data Protection Officer that: states you exercised your Section 12 right on a specific date, that the deadline lapsed, demands erasure within a final window (say 7 days), and states that you'll escalate to the Data Protection Board otherwise. Reference the penalties under the Act. Send it by email and keep proof.
File a complaint with the Data Protection Board
If the final window passes, file a complaint setting out your details, the company's details, the full chronology, the rights invoked (Sections 12 & 13), and the relief you want (erasure + action against the company). Until the Board's filing process is fully live, the same complaint also works through the company's grievance officer and consumer-grievance channels.
What a strong final notice contains
- Your identity and the exact data you want erased (name, email, phone, city).
- The date of your original request and its reference, and the date the deadline lapsed.
- The legal basis — Sections 12 and 13 of the DPDP Act 2023.
- A clear, short final deadline and the words "final notice".
- The consequence — a complaint to the Data Protection Board, which may impose penalties under the Schedule to the Act.
- A request for written confirmation of erasure to your email.
Generate your final notice + Board complaint — free
Fill a short form and our generator produces both documents, pre-filled and ready to copy, download or print — the final legal notice to the company and the complaint to the Data Protection Board of India. No account needed.
Open the free generator →Want it handled end-to-end? Run a free Saaph scan — we find where your data sits, send the DPDP removal requests, track the 90-day countdown, and prompt you to escalate if a company goes silent.
FAQ
What can I do if a company ignores my data-deletion request in India?
Escalate under the DPDP Act 2023: send a final legal notice citing Sections 12 and 13 with a short final deadline, then file a complaint with the Data Protection Board of India, which can penalise the company.
Can I claim compensation if a company won't delete my data?
No. The DPDP Act doesn't create a private right to compensation. The remedy is a Board complaint, which can penalise the company — it doesn't award you damages.
How long does a company have to delete my data?
The data fiduciary must act within the statutory timeframe and offer grievance redressal. If that lapses with no action, escalate with a final notice and then a Board complaint.
Do I need a lawyer to file a DPDP complaint?
Usually not for a straightforward erasure complaint — you can prepare the notice and complaint yourself, and our free generator drafts both. For complex matters, consult a lawyer.
General information as of June 2026, not legal advice. The Data Protection Board's complaint process is still being operationalised; the documents here are also usable through a company's grievance officer and consumer-grievance forums. Consider consulting a lawyer for high-stakes matters.