Free interactive tool
Data retention schedule builder
Row by row, against the rule that actually governs it — section 8(7) of the DPDP Act, verified from the Gazette text. Three starter rows included; edit, add, generate, download.
Row 1
Row 2
Row 3
The retention rule in practice
The rule is "whichever earlier"
Section 8(7): erase on consent withdrawal OR when the specified purpose is no longer served — whichever comes first. Retention beyond that needs a law, not a preference.
Processors erase too
The same clause obliges you to cause your data processors to erase what you shared. A schedule that stops at your own systems is half a schedule.
A schedule must execute
The document is evidence of intent; the deletion pipeline is evidence of compliance. Test erasure end to end before an auditor or the Board asks.