Digital Locker retention rules prescribe authority, provider obligations, consented URI access and mandatory security and audit requirements. The rules create a Government administered Digital Locker system for preservation and retention of issuer issued electronic records, appointing a Digital Locker authority to license and manage service providers (portals, repositories, gateways) under DeitY technical standards. They set enrollment and operational protocols for subscribers, issuers and requesters (URI push/pull, consented access via gateways), require service provider compliance with authorising terms, mandate grievance officers, suspension/revocation procedures, subscriber credential duties, fee and portability rules, audit regimes with independent auditors, confidentiality protections, offsite backups, Indian data location, and adherence to prescribed security practices.