What the DPDP Act requires
Under Section 13, every Data Fiduciary must provide a readily available means of grievance redressal and respond within the period the Rules prescribe. A principal can approach the Data Protection Board only after using it.
A grievance mechanism that is hard to find, or that misses its timelines, exposes you to Board complaints.