Tag Results

Europe’s General Data Protection Regulation (GDPR) represents one of the most robust data privacy laws in the world. It gives European citizens the right to ask organisations how their personal data is collected, stored, how it’s being used, and request that personal data be safely deleted. It requires companies to clearly explain how personal data is stored and used, plus obtain your consent before collecting it.

When the EU implemented the GDPR in May 2018 to enhance the data protection for individuals, it caused a seismic shift in operations across the organisation, from Legal, to IT to Marketing. With the introduction of the CCPA and other emerging data protection laws around the world, organisations must now, more than ever, get their houses in order to be able to effectively and defensibly respond to the challenges these regulations create.

Today’s Legal GRC (Governance, Risk and Compliance) environment is getting increasingly complex. Recent regulatory changes around data protection, including the introduction of the GDPR, CCPA and other laws around the world, have caused a dramatic impact on organisations and how they are trying to respond to the new challenges posed in order to establish and maintain compliance.

Data retention is not optional. It’s mandatory. Under the fifth data protection principle of the GDPR, personal data cannot be kept for longer than needed. However, there is no specific time limit stated. How long data is retained for will depend on the purpose for holding the data.

As high-profile cases and ever-increasing regulations highlight, we are entering a new age of dealing with data that is causing organisations to rethink everything – from how they collect data to storage, retention, access, disposal, and more.