<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Dpdp Act 2023 on WebNotes</title><link>https://v2.webnotes.in/tags/dpdp-act-2023/</link><description>Recent content in Dpdp Act 2023 on WebNotes</description><generator>Hugo</generator><language>en-IN</language><lastBuildDate>Sat, 20 Jun 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://v2.webnotes.in/tags/dpdp-act-2023/index.xml" rel="self" type="application/rss+xml"/><item><title>Zerodha data deletion request: what can and cannot be erased</title><link>https://v2.webnotes.in/zerodha-data-deletion-request/</link><pubDate>Sat, 20 Jun 2026 00:00:00 +0000</pubDate><guid>https://v2.webnotes.in/zerodha-data-deletion-request/</guid><description>&lt;p&gt;A &lt;strong&gt;Zerodha data deletion request&lt;/strong&gt; is a request by a client to have the broker erase the personal data it holds, and Zerodha&amp;rsquo;s stated answer is that it cannot permanently delete client data on request. The constraint is regulatory, not a matter of Zerodha&amp;rsquo;s preference. SEBI requires a stockbroker to maintain records of all client documents for at least 8 years, so the KYC, ledger and trade records that make up most of what a broker holds about you sit under a legal retention duty that an erasure request cannot override. The &lt;a href="https://v2.webnotes.in/digital-personal-data-protection-act/" rel="nofollow"&gt;Digital Personal Data Protection Act 2023&lt;/a&gt;
 gives a right to erasure, but that right yields to a retention obligation imposed by any other law in force.&lt;/p&gt;</description></item><item><title>Zerodha regtech and data privacy: who processes your KYC data</title><link>https://v2.webnotes.in/zerodha-regtech-data-privacy/</link><pubDate>Sat, 20 Jun 2026 00:00:00 +0000</pubDate><guid>https://v2.webnotes.in/zerodha-regtech-data-privacy/</guid><description>&lt;p&gt;&lt;strong&gt;Zerodha regtech and data privacy&lt;/strong&gt; describes how, when you open and run a &lt;a href="https://v2.webnotes.in/zerodha/"&gt;Zerodha&lt;/a&gt;
 account, your personal and financial data is processed not only by the broker but by a chain of regulatory-technology vendors: &lt;a href="https://v2.webnotes.in/kyc-registration-agency/" rel="nofollow"&gt;KYC Registration Agencies&lt;/a&gt;
, the &lt;a href="https://v2.webnotes.in/central-kyc-records-registry/" rel="nofollow"&gt;Central KYC Records Registry&lt;/a&gt;
 operated by CERSAI, the depository &lt;a href="https://v2.webnotes.in/cdsl/"&gt;CDSL&lt;/a&gt;
, registrar and transfer agents such as &lt;a href="https://v2.webnotes.in/cams/"&gt;CAMS&lt;/a&gt;
 and &lt;a href="https://v2.webnotes.in/kfin-technologies/"&gt;KFin Technologies&lt;/a&gt;
, the Aadhaar e-sign provider &lt;a href="https://v2.webnotes.in/digio/" rel="nofollow"&gt;Digio&lt;/a&gt;
, and a penny-drop bank-verification service. Each holds a defined slice of your data for a defined regulatory purpose, under SEBI rules, the &lt;a href="https://v2.webnotes.in/prevention-of-money-laundering-act/" rel="nofollow"&gt;Prevention of Money Laundering Act 2002&lt;/a&gt;
, the Depositories Act 1996, and now the &lt;a href="https://v2.webnotes.in/digital-personal-data-protection-act/" rel="nofollow"&gt;Digital Personal Data Protection Act 2023&lt;/a&gt;
.&lt;/p&gt;</description></item></channel></rss>