--- title: "Social Media Sites bound to delete data of users away for three years in India, Latest Laws +" description: "India's Data Protection Rules Brewing: Inactive Accounts, Data Breaches, & Child Age-Gating" author: "Saumya Mishra" published: 2023-12-28 updated: 2023-12-28 canonical: https://www.mindstick.com/news/3679/social-media-sites-bound-to-delete-data-of-users-away-for-three-years-in-india-latest-laws category: "technology" tags: ["database", "security in node.js", "india"] reading_time: 2 minutes --- # Social Media Sites bound to delete data of users away for three years in India, Latest Laws + **The upcoming [Digital Personal](https://www.mindstick.com/articles/23199/digital-personal-server-the-premium-web-server) [Data Protection](https://www.mindstick.com/blog/303929/what-is-data-protection-and-why-is-it-important) (**[**DPDP**](https://www.mindstick.com/blog/302557/balancing-digital-identity-and-privacy-in-the-computer-age)**) rules in India promise [significant changes](https://answers.mindstick.com/qa/115357/what-significant-changes-have-been-made-to-immigration-laws-in-major-countries-this-week), from cleaning up inactive accounts to safeguarding against data breaches and protecting children online.** ## Highlights: - **Inactive Accounts Face Deletion:** Accounts dormant for 3 years on platforms with over 20 million users in India might be permanently deleted after a 48-hour inactivity warning. - **Mandatory Data Breach Reports:** Platforms, both private and government, must promptly notify the Data Protection Board (DPB) of any data breaches, detailing the incident and [potential impact](https://answers.mindstick.com/qa/112305/can-you-explain-the-concept-of-quantum-computing-and-its-potential-impact-on-software-development). - **[Age Verification](https://www.mindstick.com/news/4693/youtube-to-test-new-ai-powered-age-verification-system-in-the-us) for Children:** A "consent framework" is underway to ensure verifiable parental consent for online services accessed by children under 18. **Cleaning Up the Digital Landscape:** The DPDP draft rules propose [automatic deletion](https://answers.mindstick.com/qa/50626/how-to-change-ios-11-mail-settings-on-automatic-deletion-of-messages-for-your-email-account) of user data from inactive accounts on major platforms. This aims to curb data hoarding and protect user privacy. E-commerce, online gaming, and social media giants with over **20 million Indian** users may be subject to this rule. Platforms will be required to notify users beforehand and offer an option to retain their data by logging in. **Data Breaches: Promptness and Transparency:** Any data breach, regardless of the platform's user base in India, must be reported promptly to the DPB. Platforms will need to provide details like the nature of the [breach](https://www.mindstick.com/blog/303233/how-to-stop-the-applications-from-breaching-privacy), date and time of discovery, affected location, extent of the leak, and [potential consequences](https://www.mindstick.com/forum/159524/explain-the-concept-of-an-uninitialized-variable-error-and-its-potential-consequences). This mandatory reporting aims to enhance breach response and user protection. **Protecting Young Users:** Verifying a child's age before granting access to online services is a key concern. The DPDP Act mandates "**verifiable parental consent**" for minors, but specific guidelines for age verification are lacking. The draft rules suggest two potential methods: a government **ID-linked digital locker system** and an electronic token system with government authorization. However, exemptions might be considered for sectors like [healthcare](https://www.mindstick.com/category/article/health-care) and education due to their nature of service. **Beyond these highlights, at least 25 rules are anticipated under the DPDP Act, covering various aspects of data privacy and protection in India.** The upcoming regulations promise a significant revamp of the digital landscape, with a focus on user control, platform accountability, and responsible data handling. ![Social Media Sites bound to delete data of users away for three years in India, Latest Laws +](https://www.mindstick.com/usernews/655071/2134ac33-bc81-429b-aa0f-44d98f8e4501/images/0598b3a7-8f43-4c6d-a35f-6d340882f819.jpg) --- Original Source: https://www.mindstick.com/news/3679/social-media-sites-bound-to-delete-data-of-users-away-for-three-years-in-india-latest-laws Copyright © MindStick Software Pvt. Ltd. This Markdown version is provided for developers, AI systems, and offline reading.