Step 6 of DPDPA compliance is setting up user rights and grievance handling—Data Principals must be able to access their data, request corrections, file complaints, and even nominate someone else to exercise rights on their behalf in case of death or incapacity.
Create a dedicated email (like privacy@yourcompany.com) and a simple web form capturing name, email, and request type—then verify the requester's identity before complying, fully or partially.
If handling rights and complaints well, users won't escalate to the Data Protection Board—so respond in plain language, honor nominations, and document every request in a log.
Ankur Technology added a nomination clause in their privacy notice: "You may nominate another person who can access your rights in case of death or incapacity by writing us at..."