Your rights, and how to use them

How to make a request

Rule 14(1)(a) — the means for making a request.

Sign in to Atma-Niyam with your mobile number. Everything below is available from inside your account, without writing to anyone:

• See what you have agreed to — your dashboard lists every purpose, for every organisation, with the date it was decided.
• Withdraw consent — from the same dashboard, purpose by purpose. Withdrawing is as easy as giving, which §6(4) of the Act requires.
• Get a copy of your records — “Download my consent records” gives you a machine-readable file of every consent, denial and withdrawal, with the notice you were shown.
• Raise a grievance — under “Grievances”.

What we need to identify you

Rule 14(1)(b) — the particulars required to identify a Data Principal.

Your registered mobile number. It is the only identifier we hold for you, and we use it solely to sign you in.

If you contact us about a specific organisation, quoting your Atma-Niyam reference — shown on your dashboard — helps us find your records faster. Organisations you share consent with see only that reference, never your mobile number.

Consent for a child

Where consent concerns a child, the parent or lawful guardian is the person who decides, and we require the organisation to verify that relationship before any consent can be given. Until that verification is recorded, the decision stays blocked.

§9 of the Act and Rule 10.

If we get it wrong

Raise a grievance in your account. We respond within 90 days of filing, as Rule 14(3) requires, and you can see the clock running on your own grievance.

You may also complain to the Data Protection Board of India, including about a Consent Manager, under §27 of the Act.

What Atma-Niyam can and cannot see

Atma-Niyam is a Consent Manager. We record that you agreed, to what, when, and which notice you were shown. We are required to be unable to read the personal data whose sharing your consent authorises, and we are not able to.

First Schedule, Part B, item 2.