Keep The Logs A Year
One-year retention of logs and data for detection and investigation
Read the full guide: Rule 6(1)(e) — DPDP Act compliance guide
Watch in English
Summary
Logs have a shelf life in this law.
One-year retention of logs and data for detection and investigation
Full transcript
Logs have a shelf life in this law.
Rule 6(1)(e) says retain such logs
and personal data for a period of one year.
Unless any law in force requires otherwise.
Pause. Why a year of the data too?
Because the rule ties it to detection,
investigation, remediation and continued processing.
The logs prove what happened.
The data lets processing carry on.
One year is the floor, not the habit.
r.6(1)(e) — Digital Personal Data Protection Act, 2023 + Rules, 2025
In force from 13 May 2027