Withdrawal of consent for service notifications

Please treat this as a formal request under the Digital Personal Data Protection Act, 2023.

Identity not yet verified

Personal data must not be disclosed until the request is confirmed to have come from the Data Principal. Impersonation is a duty breach under Section 15 and a disclosure risk for the organisation.

Request

Consent withdrawal (S.6(4))

Reference: DSR-2026-004847
Status: Received
Data Principal: Simran Ahluwalia
Contact: si••••••@rediffmail.com · ••••••5363
Received: 02 Jul 2026, 09:30
Channel: email
Language: HI
Identity: Not verified

Statutory deadline

Runs from receipt. The organisation publishes this period, which makes it binding.

--:--:--

Due: 09 Jul 2026, 09:30
Assigned to
Progress: 0 of 4 steps complete

Fulfilment steps

Each step is a system that must actually do something. A response issued before these complete is a response that will generate a grievance.

Record the withdrawal against the artefact
Consent Manager · Rohit Verma
In progress
Propagate to downstream systems
Data Discovery
Queue erasure where no other basis applies
Retention Manager
Confirm to the Data Principal
Rights portal

History

Events marked as visible are also shown to the Data Principal when they track the request.

Request submittedlast month
Received through the Data Principal portal.
02 Jul 2026, 09:30Data Principal
Visible to the Data Principal

Data map (8 elements)

Assembled automatically from Discovery. This is what makes a Section 11 response complete rather than best-effort — and it is only as good as discovery coverage.


welfare.document.photograph_blob Pension Disbursement Ledger	Photograph	active	High	1
welfare.extract.date_of_birth Grievance Case Management	Date of birth	active	High	3
public.member.email_address Health Card Registry	Email address	active	Medium	3
archive.audit_copy.device_fingerprint Health Card Registry	Device identifier	legitimate use	Low	1
/shared/payment_2023.docx Nutrition Programme Records	Employment record	active	Medium	7
citizen.grievance.photograph_blob Analytics Data Lake	Photograph	legitimate use	High	2
core.member.biometric_ref_hash Employment Exchange Registry	Biometric reference	withdrawn	Critical	3
/shared/profile_2022.docx Field Officer Endpoints	Device identifier	legitimate use	Low	2

Covering approximately 2.02 Cr records across 7 systems.

Response

Templates are bilingual and pre-populated. Section 11(b) requires the identities of other Data Fiduciaries the data was shared with to be disclosed, so the access template always lists recipients.

S.6 S.8(7)

This request breached the published response period

Record the reason in the Post-Incident notes and check whether the cause is systemic — a single late response is an operational lapse, a pattern is a compliance failure.