Back to DPDPA Glossary Index
Section 8(7); Rule 8Processing & Consent
Data Retention Policy
A retention policy states how long information is kept, the justification and the event triggering review or deletion.
Meaning and legal context
Periods depend on purposes, applicable Rules and other legal duties. Address backups, inactive accounts, investigation holds and processor copies separately.
Practical application
Give each retention rule a rationale and accountable owner.
Related concepts
Official sources and editorial review
Prepared by DPDPA Shield. Explanations are plain-language summaries; the cited legislation controls. Last reviewed .
Put privacy knowledge into practice
Explore consent, data inventory and rights-request workflows with DPDPA Shield.