Retaining Personal Data

Do you properly dispose personal data you are holding from time to time?

Do you remove personal data no longer needed for business or legal purposes?

Do you ensure that the personal data you hold are accurate and updated?


Do not keep personal data for longer than necessary for business or legal purposes. Be clear about your business and legal requirements regarding retain personal data.


Have a policy of proper removal of personal data after specified periods depending on the classification of personal data, having reference to your legal and business requirements.

Ensure personal data is updated. For example, review and classify personal data which are likely to become inaccurate over time unless it is updated?