DPDP enforcement deadline: May 2027Rules notified Nov 2025Penalty exposure up to ₹250 Cr
Free ToolsTemplatesServicesWorkshopsBook Consultation

Quick Answer

How long can organisations retain personal data under the DPDP Act? The DPDP Act 2023 requires Data Fiduciaries to retain personal data only for as long as necessary to fulfil the purpose for which it was collected. Once the purpose is served — or the data principal withdraws consent and there is no other legal basis for retention — the data must be erased. Organisations should maintain a formal Data Retention Schedule that specifies retention periods for each data category, the legal or business justification for that period, and the deletion mechanism.

DPDP Data Retention Schedule — Define How Long You Keep Personal Data

DPDP Section 8(7) requires you to delete personal data when it's no longer needed. Generate a complete retention schedule for your organisation in 3 minutes.

Free Tool Covers 40+ data categories Sector-specific rules DPDP + Indian regulatory requirements Free download
1
Organisation
2
Data Categories
3
Your Schedule
Step 1 — Organisation Context
Tell us about your organisation so we can apply the right regulatory requirements.
Every Sunday

The Sunday DPDP Brief

One real DPDP development explained in plain English, one practical how-to, one number from our own assessment data. Nothing else — no daily noise, no sales pitch.

No spam. Unsubscribe with one click, anytime.

Related tools & reading
DPDP Employee Awareness Programme KitDPDP Investigation Response PlaybookDPDP Penalty Mitigation PlaybookDSAR Under DPDPSee all Reference & Checklists tools →📝 DPDP Questionnaire Response📝 Whatsapp Customer Communication DPDP Consent
`; const blob = new Blob([html], {type:'text/html'}); const url = URL.createObjectURL(blob); const a = document.createElement('a'); a.href = url; a.download = state.orgName.replace(/[^a-zA-Z0-9]/g,'_') + '_Data_Retention_Schedule.html'; document.body.appendChild(a); a.click(); document.body.removeChild(a); URL.revokeObjectURL(url); } // ─── LEAD FORM ──────────────────────────────────────────────────────────────── function handleLeadSubmit(e) { e.preventDefault(); const form = document.getElementById('lead-form'); const data = new FormData(form); fetch('https://script.google.com/macros/s/AKfycbz-i5iO8kvrhkzuF0POthUqamN0R01pio0A8NvFpic7fNIqYVE18Yy2W5L_UOTFtNt3DQ/exec', { method: 'POST', body: data }).then(() => { document.getElementById('lead-form-wrap').classList.add('hidden'); document.getElementById('lead-success').classList.remove('hidden'); }).catch(() => { // Fallback: just show success document.getElementById('lead-form-wrap').classList.add('hidden'); document.getElementById('lead-success').classList.remove('hidden'); }); } // ─── UTILS ─────────────────────────────────────────────────────────────────── function escHtml(s) { return String(s).replace(/&/g,'&').replace(//g,'>').replace(/"/g,'"'); }