When must personal data be erased under the DPDP Act?
Answer:
When the purpose is no longer being served and retention is not required by law, the data and references enabling identification must be erased.
erasure purpose ends deletion
Related Questions:
- By when do organizations need to technically integrate with Board-registered Consent Managers?
- Is the consent notice required to give contact details?
- What makes consent valid under Section 6 of the DPDP Act?
- Must a Data Fiduciary maintain data accuracy?
- What is the right to correction and erasure?
- How are DPDP penalties determined by the Board?