Online platforms may need to delete data of users inactive for 3yrs

The Indian government is contemplating a significant provision in the upcoming Digital Personal Data Protection (DPDP) rules, suggesting the permanent deletion of user data for accounts that have been inactive for a continuous three-year period, according to a report by The Indian Express (IE). This proposal, yet to be officially released, is part of the draft executive rules under the DPDP Act, enacted as law in August 2023.

An early version of the draft, according to a report by MoneyControl, suggests that user data deletion may apply to e-commerce, online gaming, and social media companies with over 20 million users registered in India. Platforms would be required to notify users 48 hours before the expiration of the three-year period,