A retention period specifies how long records are kept before deletion or review. Under the EU GDPR, personal-data retention must reflect necessity and applicable legal record-keeping obligations.[1]
Do not automatically give a marketing list the same period as accounting records. Identify the purpose and obligation for each category. Without an executable deletion process, a period written in a policy remains only an intention.
Content updated:
Sources
Compiled with AI assistance using public sources. General explanation, not individual legal or tax advice. Describing a concept does not mean Zoloo offers it as a feature.