What to do if a company ignores your data request.
A practical guide for Indian users when a company ignores your data access or deletion request: how to follow up, escalate and keep evidence.
The simple answer
If you asked a company for your data or for deletion and got silence, the first move is a clear, dated follow-up to the grievance or privacy contact. Reference your original request and ask for a response by a reasonable date.
Silence is itself useful evidence. Keep every message, screenshot the policy and contact details, and build a short timeline so you can escalate later if needed.
What to check
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
Silence is part of the evidence.
State of Privacy is built around evidence because a right is only useful if a company acts on it. A documented non-response is a strong starting point for escalation.
What to do next
Keep it practical: take one action, save proof, and avoid giving more data than the task needs.
Keep it practical: take one action, save proof, and avoid giving more data than the task needs.
Keep it practical: take one action, save proof, and avoid giving more data than the task needs.
People also ask
What if a company never replies?
Send a dated follow-up, keep proof of the silence and prepare to escalate through formal routes when available.
How long should I wait?
Give a reasonable, clearly stated window in your follow-up, then treat continued silence as escalation-worthy.
What evidence matters most?
Your original request, dates, the company contact details and proof that you received no proper response.
How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.
Talk to Meridian Bridge Strategy →Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.
Get the template email →We investigated 107 Indian company websites. The public report shows what we found.