Rule 8Retention, Erasure & Publishing Requirements
Retention and erasure for specified classes of Data Fiduciary
What the Rule sets out
For classes of Data Fiduciary notified for this purpose (commonly understood to include large e-commerce, social media and gaming platforms), a defined period of Data Principal inactivity is treated as the point at which the specified purpose is deemed no longer served, triggering the Section 8(7) erasure duty — subject to giving the individual advance notice before deletion so she can act to retain the account.
What this means in practice
- If you operate a consumer platform with dormant accounts, you likely need an inactivity-triggered erasure job, plus a pre-erasure notice window, not indefinite retention of stale accounts.
Summarised for practical use from the publicly notified DPDP Rules, 2025. Confirm exact clause text against the official Gazette notification before relying on it for compliance decisions.