93. Digital Personal Data Protection Act (DPDP) – Data Officers, Consent, Erasure & Children’s Data

#HRhelpdesk #IndiaHRGuide #MandeepSingh, What happens when an employee asks, “What personal data do you have about me and why?” Who in the organisation is actually responsible for answering that? And when someone withdraws consent, are HR systems ready to stop using the data immediately? In this episode, Mandeep Singh takes the DPDP discussion deeper by focusing on data governance, consent management, and the right to erase personal data. He explains the concept of significant data fiduciaries and why organisations need clearly identified responsibility for managing personal data. From an HR perspective, he highlights the importance of nominating HR team members as data officers for internal employees, creating a clear point of contact for all personal data related queries. Mandeep explains why organisations must know exactly what personal data they hold, the purpose for which it is used, the time period for which it is retained, and whether consent is required. He walks through how consent must be recorded, how withdrawal must be tracked, and why data use must stop the moment consent is withdrawn. The episode also explains the practical meaning of data erasure. Using recruitment examples, Mandeep clarifies when organisations can retain candidate data for employment purposes and when deletion becomes mandatory, with confirmation back to the individual. Finally, the discussion addresses the heightened sensitivity around children’s personal data. Mandeep explains why extra care, parental consent, and legal guidance are essential whenever organisations engage with or collect personal data relating to children.