By Anisha Mathur

The DPDP Act urges deletion, yet India’s legal system continues to function on digital memory. The real challenge for organisations is recognising what must never be erased.

India’s digital economy rests on an invisible architecture of electronic traces such as payments, reconciliations, approvals, service logs, CCTV footage, GPS trails, settlement records, warranty logs, and complaint histories. These fragments of digital memory increasingly determine how disputes unfold and how rights are enforced.

With the Digital Personal Data Protection Act, 2023, and the newly notified DPDP Rules now shaping organisational behaviour, attention has shifted to storage limitation: the principle that personal data must be deleted once its purpose is fulfilled. At the same time, the very same framework contains an equally important mandate, i.e. data must be retained wherever any other Indian law requires it. Privacy and preservation must now coexist, not........

© ABP Live