How to file a privacy complaint in India.
How Indian users can start a privacy complaint: contact the company, preserve evidence, and understand DPDP escalation.
The simple answer
Start with the company. Send a clear request to the grievance or privacy contact and keep proof. A complaint is stronger when you can show what you asked, when you asked, and what happened next.
Under DPDP, users will have formal complaint routes as the framework becomes operational. But even before escalation, your evidence trail matters.
What to check
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
If this is unclear, treat it as a signal to ask the company for a plain-English explanation.
Complaints need receipts.
State of Privacy is built around evidence for this reason. A claim becomes stronger when it is tied to dates, screenshots, policy excerpts and observed behavior.
What to do next
Keep it practical: take one action, save proof, and avoid giving more data than the task needs.
Keep it practical: take one action, save proof, and avoid giving more data than the task needs.
Keep it practical: take one action, save proof, and avoid giving more data than the task needs.
People also ask
Where do I file a privacy complaint?
Start with the company grievance or privacy contact. Formal DPDP complaint routes depend on notified procedures.
What evidence should I keep?
Keep screenshots, URLs, dates, emails, app screens and policy excerpts.
Can I complain about spam calls?
Yes, but also use telecom/TRAI routes for spam-call complaints because those systems are separate.
How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.
Talk to Meridian Bridge Strategy →Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.
Get the template email →We investigated 107 Indian company websites. The public report shows what we found.