Data Retention Policy Template Gdpr
For any organization that acts as a data controller or a data processor the data retention policy is compulsory according to the gdpr rules.
Data retention policy template gdpr. Businesses using personal data in this case should not retain personal data for any longer than necessary. The document is optimized for small and medium sized organizations we believe that overly complex and lengthy documents are just. This policy sets the required retention periods for specified categories of personal data and sets out the minimum standards to be applied when destroying certain information within iris connect further. This policy sets the required retention periods for specified categories of personal data and set out the minimum standards to be applied when destroying certain information within a company.
It explains the gdprs requirements to employees and states the organisations commitment to compliance. Under the gdpr data controllers ie. You should already have developed a gdpr data retention policy although if you have yet to do so now is the time to conduct a review of your data retention policies and update them accordingly. Data retention policy 1.
Purpose scope and users. Gdpr data retention policy. Hence this policy should be applicable on a company wide basis for all the employees. Most organizations implementing the gdpr consider retention policies or retention rules necessary to achieve this.
Furthermore the gdpr gives data subjects rights to require the erasure of their personal data also known as the right to be forgotten.