Erase
They must erase on request unless retention is needed for the specified purpose or by law
Read the full guide: Section 12(3) — DPDP Act compliance guide
Watch in English
Summary
Erasure is a duty with one word attached.
They must erase on request unless retention is needed for the specified purpose or by law
Full transcript
Erasure is a duty with one word attached.
Section 12(3). Ask, and they shall erase.
Unless retention of the same is necessary
for the specified purpose.
Pause. Or for what else?
For compliance with any law in force.
Two exceptions. The Act wrote both.
Necessary, not convenient.
And the purpose has to be the specified one.
Erase — unless. That is the whole rule.
s.12(3) — Digital Personal Data Protection Act, 2023 + Rules, 2025
In force from 13 May 2027