OBL-19: Account Inactivity Deletion & De-identification (Rule 8)
Enforces automated data erasure after prolonged account inactivity under Rule 8.
Statutory scope: Rule 8 — inactivity AND separate retention · Assigned to Records / storage owner · Systems: Marketing Automation Engine (SYS-003); Foreign-Region Secondary Backup Replica (SYS-008); Restore Quarantine & Sandbox Store (SYS-014)
Recommended interface: Restore a pre-withdrawal snapshot without complete current history; expected outcome is quarantine. Hold release reopens review, not automatic erasure.
Restore a pre-withdrawal snapshot without complete current history; expected outcome is quarantine. Hold release reopens review, not automatic erasure.
Governance & Architecture
Verification Specification & Workpaper
proposed per-row review/acceptance specification; not a claim of executed statutory coverage
populated hypothetical decision/specimen; not actual enterprise execution
Canonical Statutory Grounding
Source references verified against the official Gazette of India publication baseline.
Data Fiduciary (processing itself or through processor)
Class inactivity or any processing for r8(3)
Third Schedule class/purpose/period; 48-hour warning; separate minimum one-year personal/traffic/other-log retention from processing for Seventh Schedule purposes.
Legal-retention exception; further retention under other law or Government notification in (3).