The Data Subject Rights (DSR) Form is a document provided by State Bank of India (SBI) to allow NRI customers to exercise their legal rights under the General Data Protection Regulation (GDPR) regarding their personal data.

 

1. Purpose and Scope

• The form is used to confirm whether a customer’s personal data is being processed and to provide access to that data.

• It outlines how and why personal data is used, details regarding data sharing or transfers, and the duration for which the data is held.

• The bank only accepts requests from the data subject directly; requests from family members or third parties are not permitted.

2. Rights of the Data Subject

Customers can use this form to request several actions regarding their personal information:

 

• Access and Rectification: Requesting copies of personal data or correcting inaccuracies.

• Consent and Objection: Withdrawing consent for data processing or objecting to automated profiling and decision-making.

• Erasure and Restriction: Requesting the deletion of personal data or restricting its further processing.

• Data Portability: Requesting data in a machine-readable format (noted as “yet to be rolled out” in the document).

3. Submission and Verification

• Applicants must provide identification details, including their full name, contact information, country of residence, and CIF/Account Number.

• Proof of identity documents must be submitted alongside the form to safeguard privacy.

• The bank may contact the customer for additional supporting information to verify their identity after the request is received.

   

4. Processing Timelines

• The bank aims to respond to and fulfill all data subject rights requests within 30 days of receipt.

• If a request is unusually complicated or if the bank requires further information, this period may be extended, and the customer will be notified accordingly.

5. Delivery Options and Contact

• Customers can specify whether they wish to receive the requested information as a physical copy or a soft copy.

   

• For any clarifications, customers can contact the Branch or the Data Protection Cell of the Compliance Department via the provided corporate email address.