What is the data retention rule for large e-commerce, social media and gaming platforms?
Answer:
Listed platforms must erase personal data 3 years after the Data Principal's last interaction, unless legally required to retain it (Schedule III).
data retention three years schedule iii
Related Questions:
- By when do organizations need to technically integrate with Board-registered Consent Managers?
- Is the consent notice required to give contact details?
- What makes consent valid under Section 6 of the DPDP Act?
- Must a Data Fiduciary maintain data accuracy?
- What is the right to correction and erasure?
- How are DPDP penalties determined by the Board?