Retention and deletion policies

Link data retention to legal obligations and case needs. Document justification for each data category and define deletion dates once the purpose ends.

Secure deletion

Deletion and anonymization procedures ensure data is removed securely. Regular audits help verify that no outdated records remain.

Cross border transfers

Cross border transfers require safeguards. When data moves outside the EEA, ensure appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms.

Retention during subject rights

Data subject rights during retention periods should be respected. Provide access and updates where required and communicate deletion timelines to data subjects.