Document Overlap
1.3%
← Content Overlap Report
A-047
→
First documentLog Retention, Deletion, and Audit Trails: Building anOpen original ↗
A-065
Second documentWhat Counts as a Reasonable Security Safeguard under DPDP?Open original ↗
Low overlap
Top paragraph overlap
62.2%Page comparison
Paragraph matches
Strongest non-zero match for each paragraph.
First paragraph48 words
Common questions about log retention, deletion, and audit trails
Directions under section 70B(6) of the Information Technology Act, 2000 (No. 20(3)/2022-CERT-In) - Indian Computer Emergency Response Team (CERT-In), Government of India The Digital Personal Data Protection Act, 2023 - Ministry of Law and Justice / Ministry of Electronics and Information Technology, Government of India
62.2%
Second paragraph215 words
Common questions about reasonable security safeguards under DPDP
DPDP Rule 6 points to retaining relevant security logs and records for at least one year as part of reasonable safeguards, which sets a minimum rather than a maximum. CERT-In Directions, sectoral regulations, contractual obligations with customers, and your own forensic and internal investigation needs may justify or require longer retention for certain logs. At the same time, DPDP’s broader principles on storage limitation and data minimisation apply, so indefinite retention of all logs is unlikely to be appropriate. A practical approach is to define retention periods by log type, balancing regulatory requirements, business needs, and the sensitivity of any personal data those logs may contain, and to document the rationale so you can explain it if asked. The Digital Personal Data Protection Act, 2023 (No. 22 of 2023) - Ministry of Law and Justice, Government of India India Digital Personal Data Protection Act, 2023 (DPDP Act) and Digital Personal Data Protection Rules, 2025 – Overview - EY India Overview and Key Highlights of The Digital Personal Data Protection (DPDP) Rules, 2025 - RSM India Guidelines on Information Security Practices for Government Entities - Indian Computer Emergency Response Team (CERT-In), MeitY Cyber Security Framework in Banks - Reserve Bank of India Identify, Protect, Detect, Respond and Recover: The NIST Cybersecurity Framework - National Institute of Standards and Technology (NIST)