4

Erasure and retention periods

Specified classes of Data Fiduciary must erase personal data once the prescribed period elapses without the Data Principal approaching them, and must give advance intimation before erasure. Maintain logs of personal data and processing for the prescribed period.

Rule 8DPDP Rules, 2025Data Fiduciary
What this requires

Specified classes of Data Fiduciary must erase personal data once the prescribed period elapses without the Data Principal approaching them, and must give advance intimation before erasure. Maintain logs of personal data and processing for the prescribed period.

Evidence a regulator would accept

  • Retention schedule by purpose
  • Pre-erasure notification records
  • Erasure execution log

How this product discharges it

discovery (primary)
Our position

Changing this recalculates the readiness score immediately.

Current
Gap
Residual risk
High
Owner
Vikram Saxena
Last reviewed
22 Apr 2026
Next review due
29 Jan 2027

Open gaps (2)

Gaps raised against this obligation. Closing one moves this clause forward.

Evidence (0)

Documents indexed against this obligation in the evidence vault.

No evidence attached yet. Open the evidence vault.

History

  1. Clause status updated following remediationyesterday
    06 Aug 2026, 00:30Deepika Joshi
  2. Clause status updated following remediation4 days ago
    03 Aug 2026, 17:30Rohit Verma
  3. Clause status updated following remediation6 days ago
    01 Aug 2026, 10:30Naveen Kulkarni
  4. Clause status updated following remediation8 days ago
    30 Jul 2026, 06:30Vikram Saxena
  5. Clause status updated following remediation10 days ago
    28 Jul 2026, 00:30Imran Sethi
  6. Clause status updated following remediation13 days ago
    25 Jul 2026, 16:30System
  7. Position reviewed and recorded4 months ago
    22 Apr 2026, 11:55Vikram Saxena

Related obligations