Back to Module
9 of 14|Obligations of Data Fiduciary
reading 15 min•Data Management
Retention
When is it okay to keep data?
🎯 Learning Objectives
- ▸ Understand the legal exceptions to deletion
- ▸ Design a retention policy
Exceptions
Section 8(7)(a) allows retention if it is necessary for compliance with a legal obligation. For example, the RBI mandates that banks keep financial transaction records for a certain number of years. The DPDPA does not override these laws.
📖 Glossary
- Legal Obligation
- A requirement imposed by a law, regulation, or court order.
🔑 Key Takeaways
- You can keep data if a law requires it.
- You can keep data to defend legal claims.
- You must document why you are retaining the data.
📚 Further Reading
- DPDPA Section 8(7) — Government of India (2023)
Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...