IT Decommissioning policy
Assign topic to the user
EU GDPR DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more 
EU GDPR DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
EU GDPR DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
Answer:
The EU GDPR does not refer to decommissioning of IT systems or assets, it refers to what is called data retention, meaning that personal data should not be kept for longer than necessary to fulfill the purpose for which it was collected regardless of how and where the data is stored.
What you should be considering is a Data Retention Policy and a Data Retention Schedule which you can find at: https://advisera.com/eugdpracademy/documentation/data-retention-policy/ and https://advisera.com/eugdpracademy/documentation/data-retention-schedule/
Comment as guest or Sign in
Apr 24, 2019