GDPR

Retention period

The maximum length of time for which data may be kept.

Definition

The GDPR requires personal data to be kept only for as long as strictly necessary for the purpose of the processing (storage limitation principle). Beyond that period, data must be deleted or moved to a dormant archive.

Context & regulatory framework

Examples: unsuccessful job application (2 years max), invoice (10 years), connection log (1 year). Retention periods vary depending on the purpose and on legal obligations.

With Data Comply One

How we support you

Data Comply One supports you on Retention period with a complete compliance management platform and the expertise of our teams (DPO, CISO, consultants). The goal: help you reach and maintain compliance, calmly, at your own pace.

Want to know more about Retention period?

Expert reply within 2h No commitment

By submitting this form, you agree that your data will be processed by Data Comply One to handle your request. To find out more, see our privacy policy.