Lesson 3.4: Right to erasure and the limits of erasure

Module 3 · Lesson 3.4 of 8 · About 30 minutes · Right to erasure and the

Erasure is the right that needs the most planning, because data hides in many copies. This DPDPA 2023 course page explains right to erasure and the in plain language.

right to erasure and the - DPDPA 2023 course lesson banner

What you will learn about right to erasure and the

Explain when erasure must happen
Know the legal-retention exception
Plan erasure across systems and backups

When to erase (right to erasure and the)

Erase when the person asks (unless retention is necessary for a specified purpose or required by law), when consent is withdrawn, or when the purpose is no longer served. Tell processors to erase too.

Erasure steps

Select a numbered box to read more.

Tap or click a step to see exactly what to do.

Keep or delete? (right to erasure and the)

Data	Decision
Invoice data needed for tax	Keep for the legal period, delete after
Marketing preferences	Delete on request
Old CVs of unselected candidates	Delete when hiring ends
Chat support logs	Delete after purpose unless needed

Worked example

A person withdraws consent for a newsletter. The firm removes the address, tells its email vendor, and keeps only a suppression note so it does not email again. That note is minimal and documented.

Activity (5 minutes) (right to erasure and the)

List three data types you hold and the law that may require you to keep each.

Key takeaway: Erasure without a retention schedule is guesswork. Build the schedule first.

Check your understanding of right to erasure and the

Q1. Must you erase data a law requires you to keep?

Q2. When must processors erase?

Q3. Withdrawing consent can lead to:

← Right to correction, completion and updating Grievance redressal →

Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.

Official sources for right to erasure and the: Digital Personal Data Protection Rules, 2025 (MeitY, PDF) and DPDP Rules 2025, English text (PDF). Always check the latest official notifications.