Data retention is the storage of data for a specific period, guided by legal, operational, and regulatory considerations. While data minimisation principles advocate for limiting the collection and storage of personal data, retaining certain information is often necessary for various purposes.

In this podcast, Jesse Akiwumi and Harry Berryman, members of the Data Protection team at Clarkslegal, address the top frequently asked questions we receive about data retention. These questions include: 

• How long can an organisation lawfully keep data?
• What happens to data that is shared with others? 
• Why is it important to limit the storage of data? 
• Do organisations need policies to govern what data is retained and what is destroyed? 
• What are the consequences of wrongfully deleting information? Can an organisation face criminal charges for deleting or altering information that an individual has requested? 
• Can an organisation destroy or amend information after responding to a request? 

If your organisation needs help drafting a data retention policy or employee training on data protection requirements, please contact our Data Protection Lawyers.