DPDP Section 12 ยท Right to erasure

Delete your personal data from ICICI Prudential Life

Section 12 of the DPDP Act gives you a clean right to ask ICICI Prudential Life to erase what they hold on you. They have 30 days to act. They can refuse only for specific reasons that the law recognises. Send the request, keep the trail.

Why this page exists: ICICI Prudential Life names a specific officer (Ashwini Bondale) in their privacy policy but does not publish an erasure workflow. This page pre-fills a Section 12 request template addressed to them so you do not have to draft the legal language yourself.

Send request to
Grievance Redressal Officer
ICICI Prudential Life Insurance Company Limited

Response window: 30 days
Verified: 19 Jul 2026

What "erase" actually means

A serious erasure by ICICI Prudential Life should include four things. Ask them to confirm each one:

  1. Your account row is deleted or truly anonymised in the production database.
  2. Your data is removed from analytics warehouses, backups within the next rotation window, and log stores older than the CERT-In retention rule.
  3. Any third-party processor they shared your data with is instructed to erase, and provides an acknowledgement.
  4. Your row is removed from any AI training set, or, if the model has already been trained, a note is added to the dataset so future retraining excludes it.

The first three are unambiguous. The fourth is technically harder for models that are already deployed. A reasonable response is "we have stopped using your data for future training and removed it from the training corpus."

Reasons they can lawfully refuse

The Act does not give absolute erasure. If any of these apply, they can decline in whole or in part, but they must tell you which one and why:

  • Retention required by another law. RBI KYC (5 years post closure, 10 for STR-flagged), PMLA, Income Tax Act invoicing, IT Act log retention (180 days by CERT-In). Ask for the specific section.
  • Ongoing purpose. If you still have an active loan, subscription, or open case with them, erasure of the fields tied to that purpose can wait.
  • Legal claim. If there is a live dispute or court order, the data can be retained till it closes.

"We might want to send you offers" is not a lawful ground. Neither is "our system doesn't support delete".

If they miss the 30 days

File with the Data Protection Board of India under Section 13. Attach the full email chain. The Board can direct ICICI Prudential Life to act and can impose penalty for delayed or refused erasure. In practice, most brands prefer to resolve at this stage rather than have an order recorded against them.

A short warning about "delete my account" in the app

Deleting your account in the app is not the same as an erasure request. Many apps only deactivate the account and keep the data. If you want the data actually gone, send the Section 12 email even if you also tap the in-app delete button. Reference both in the email so it is on record.

Something wrong on this page?

If the email bounces or the officer has changed, mail [email protected]. We update inside a week.

Verified 19 Jul 2026 from the primary source.