Before the commencement of the Digital Personal Data Protection Act, 2023, data protection was a concern of a patchwork of other laws including the Information Technology Act. The entire point of introducing a singular separate organic body of law regarding data protection was to reduce the unconsented digital footprint remaining after a person goes offline so as to protect that data from all hands, regardless of the owner of the hands and their purpose. Not only does the Act provide no provision for the automatic deletion of personal data, but it also detaches the state from any such obligation as well.