Does the GDPR tell me to keep records or data for a certain time?
We wish it was that easy. The General Data Protection Regulation (GDPR) does not set any specific retention period. Instead, the General Data Protection Regulation (GDPR) urges your company to determine how long it really needs personal data for a specific business process. And set the data retention period there. To be precise, the General Data Protection Regulation (GDPR) says about data retention: "personal data may not be kept in a form which permits identification of data subjects for any longer than necessary for the [...]