Ask whether India has a right to be forgotten and the honest answer is: not by that name, but something narrower and more specific exists, and it is worth knowing exactly what it covers before you go looking for it.

The mechanics of Section 12

Section 12 gives a Data Principal the right to request correction, completion, updating or erasure of personal data held by a Data Fiduciary. This is a right exercised against a specific organisation holding your data, like your bank or your e-commerce account. It is not a general right to disappear from the internet or compel a search engine to delist a webpage about you, which is closer to what the European right to be forgotten actually does. India's version is deliberately narrower and more transactional.

The retention floor conflict

Erasure under DPDP is not purely something you have to ask for. Section 8(7) places an independent duty on the Data Fiduciary to erase personal data once consent is withdrawn, or once the specified purpose is no longer being served. However, a Data Fiduciary can decline an erasure request where retention is necessary to comply with another law. Rule 8 also sets default retention windows for some sectors, and a separate floor requires every Data Fiduciary to keep personal data and processing logs for at least one year before erasure. Erasure rights sit on top of these retention floors, not in place of them.

Handling the erasure workflow

For DPOs and engineering teams, building the backend to support this right requires clear data mapping.

  • Identify the specific Data Fiduciary holding the data and use the consent-withdrawal or grievance link its notice is required to provide.
  • State exactly what you want corrected, completed or erased, rather than a general request to delete everything.
  • Expect a response within the 90-day window the DPDP Rules set for Data Fiduciaries to resolve this kind of request.
  • If it goes unresolved, Section 13 gives you a path to raise a formal grievance with the Data Protection Board.

Call it erasure rather than forgetting, and the right makes more sense for what it actually is: a tool for cleaning up your own data trail with specific organisations, not a single switch that wipes your digital footprint everywhere at once.