We wish it was that easy. The General Data Protection Regulation (GDPR) does not set any specific retention period. Instead, the General Data Protection Regulation (GDPR) urges your company to determine how long it really needs personal data for a specific business process. And set the data retention period there. To be precise, the General Data Protection Regulation (GDPR) says about data retention: "personal data may not be kept in a form which permits identification of data subjects for any longer than necessary for the [...]

Privacy laws and data retention closely relate to each other. Often privacy laws impose on companies that they justify the storage of data and to include an end date for the data life cycle.  After the end date lapses personal data will need to get deleted. Specifically, the GDPR says about data retention: “personal data may not be kept in a form which permits identification of data subjects for any longer than necessary for the purposes [...]

The EU General Data Protection Regulation (GDPR) is the new data protection law of the EU and probably a game changer for data retention. It will be applicable on 25 May 2018. The GDPR may very well one of those laws that will rock the entire world. It is already known now as the most lobbied piece of legislation. It is generally considered as the killer of conversion ratios, small and medium enterprises (SMEs) and [...]