Plain-English DPDP term
What is storage limitation under DPDP?
Storage limitation means setting a clear time to delete personal data. The time depends on why you need it and which laws require you to keep it.
Example: a customer closes an account
- The company may hold account details, support messages and copies with suppliers.
- A bill may need to be kept under tax rules. A marketing record may need a different deletion date.
- Ask the legal team which records must be kept and for how long.
Make a deletion list
- Name each type of record, such as a bill or a support message.
- List the apps, saved files, backups and suppliers holding a copy.
- Write when to delete it and any legal reason for keeping it.
- Name the person who will check that deletion worked.
What the Act says
- Section 8(7) covers deleting data when consent is withdrawn or the reason for using it ends, with an exception for records the law requires you to keep. It also covers copies held by suppliers processing the data.
- This provision takes effect on 13 May 2027. Check the full rules with your legal team.
Try it with your team
- Use a test record to check deletion in each place on your list. Save the results and fix failed deletions.
- Start with the free self-check. If your team needs support, see help checking and fixing your processes.
Source: DPDP Act, 2023, and its start dates. Reviewed 5 September 2026.