Guest
Register of Data Subject Access Requests
Please let me know for how long we should keep it the Register of Data Subject Access Requests?
Assign topic to the user
Expert
Andrei Hanganu
Jul 18, 2018
Answer:
There is not mention in the EU GDPR on how long the data subject requests should be kept. However, you are free to decide upon a retention period that would at least give you the possibility to defend your legal rights if necessary. So, a good start would be to keep them for a period which is close to the statute of limitation under national law, in Romania that period is three years.
To learn more about the EU GDPR check out our free webinar “EU GDPR Foundations Course” (https://advisera.com/training/eu-gdpr-foundations-course//)
Comment as guest or Sign in
Jul 18, 2018
Jul 18, 2018
Jul 18, 2018