Section 12: Right to correction and erasure

What Section 12 says, in plain English

Right to have inaccurate data corrected, incomplete data completed, or personal data erased. Erasure can be refused where retention is required by law or a specified purpose is still active.

What it means for you

Erasure is not absolute. If you refuse, cite the specific law or purpose. RBI KYC (5 years post closure, 10 for STR-flagged), PMLA, and IT Act log retention are the usual grounds.

How this is operationalised in dcomply

The DSR Portal handles correction and erasure with automatic routing to the right team. The Data Retention module tracks the legal-hold flags that justify retention despite an erasure request.