OBL-13: Purpose-Completion Erasure & Retention Limits
Automates deletion or de-identification when processing purpose is fulfilled or consent withdrawn.
Statutory scope: Section 8(7)(a), (b) · Assigned to Records / storage owner · Systems: Marketing Automation Engine (SYS-003); Foreign-Region Secondary Backup Replica (SYS-008); Restore Quarantine & Sandbox Store (SYS-014)
Recommended interface: Restore a pre-withdrawal snapshot without complete current history; expected outcome is quarantine. Hold release reopens review, not automatic erasure.
Restore a pre-withdrawal snapshot without complete current history; expected outcome is quarantine. Hold release reopens review, not automatic erasure.
Governance & Architecture
Verification Specification & Workpaper
proposed per-row review/acceptance specification; not a claim of executed statutory coverage
populated hypothetical decision/specimen; not actual enterprise execution
Canonical Statutory Grounding
Source references verified against the official Gazette of India publication baseline.
Data Fiduciary
Processing by it or its processor
Responsibility despite agreements/principal default; valid processor contract; conditional data accuracy; safeguards; breach intimation; erasure; contact and grievance mechanism.
s8(7) lawful-retention exception; s17 preserves s8(1),(5) under subsection (1).