Right to erasure (DPDP)

Your right to have a Data Fiduciary erase personal data you consented to its processing, unless retention is necessary for the specified purpose or required by law (s. 12(3)). Separately, the fiduciary must erase data of its own accord once you withdraw consent or the purpose is no longer served (s. 8(7)); Rule 8 and the Third Schedule of the DPDP Rules 2025 deem the purpose served after three years without contact for large e-commerce, online gaming and social media platforms, with at least 48 hours' notice to you before erasure. Requests go through the fiduciary's published grievance channel and must be answered within the period it publishes, which the Rules cap at 90 days.

A Data Principal shall have the right to correction, completion, updating and erasure of her personal data for the processing of which she has previously given consent, including consent as referred to in clause (a) of section 7, in accordance with any requirement or procedure under any law for the time being in force.