Paragraph match score 83.1%
Page A-063
Operating model: architecting erasure and retention across BFSI systems
Attach lawful bases and retention periods to each data class For every dataset, document the primary purpose, lawful basis under DPDP, and the regulator- or law-driven retention obligations that constrain erasure decisions.
Page A-072
Designing retention and erasure rules that balance DPDP with tax and compliance laws
Maintain suppression lists that record minimal, hashed identifiers and a "do not process for marketing" or "erased" flag, to prevent future reactivation of deleted users. Document, for each dataset, its purpose, lawful basis, retention logic, and erasure method so that engineers, legal, and business owners are aligned.