4

Erasure on withdrawal or purpose fulfilment

Erase personal data — and cause your Processor to erase it — once the Data Principal withdraws consent or the specified purpose is no longer being served, unless retention is required by law.

← S.8(6)S.8(9) →Open the module
Section 8(7)–(8)DPDP Act, 2023Data Fiduciary
What this requires

Erase personal data — and cause your Processor to erase it — once the Data Principal withdraws consent or the specified purpose is no longer being served, unless retention is required by law.

Evidence a regulator would accept

  • Retention schedule
  • Erasure job records
  • Deletion certificates

How this product discharges it

discovery (primary)consent
Our position

Changing this recalculates the readiness score immediately.

Current
Partially compliant
Residual risk
Medium
Owner
Meera Iyer
Last reviewed
21 Jun 2026
Next review due
21 Oct 2026

Open gaps (4)

Gaps raised against this obligation. Closing one moves this clause forward.

Evidence (0)

Documents indexed against this obligation in the evidence vault.

No evidence attached yet. Open the evidence vault.

History

  1. Clause status updated following remediationyesterday
    06 Aug 2026, 00:30Deepika Joshi
  2. Clause status updated following remediation4 days ago
    03 Aug 2026, 17:30Rohit Verma
  3. Clause status updated following remediation6 days ago
    01 Aug 2026, 10:30Naveen Kulkarni
  4. Clause status updated following remediation8 days ago
    30 Jul 2026, 06:30Vikram Saxena
  5. Clause status updated following remediation10 days ago
    28 Jul 2026, 00:30Imran Sethi
  6. Clause status updated following remediation13 days ago
    25 Jul 2026, 16:30System
  7. Position reviewed and recorded2 months ago
    21 Jun 2026, 11:55Meera Iyer

Related obligations