Holding Personal Information

GDPR lets the controller determine the period for data retention. In some cases, like for financial declarations, domestic laws impose a fixed term like 10 years while for health declaration periods can be even longer up to 20 years because of the potential implication in legal actions.

Our Toolkit contains a data retention policy template that may help controllers to determine the period of data retention for each processing activity.

• Data Retention Policy https://advisera.com/eugdpracademy/documentation/data-retention-policy/

If you need to understand how to process personal data under GDPR, you can consider enrolling in our free online training EU GDPR Foundations Course: https://advisera.com/training/eu-gdpr-foundations-course//