This lesson covers how to structure retention and deletion policies, ensure secure disposal, and manage cross border transfers while respecting data subject rights.
Retention, Deletion, and Cross Border Transfers
This lesson covers how to structure retention and deletion policies, ensure secure disposal, and manage cross border transfers while respecting data subject rights.
Retention and deletion policies
Link data retention to legal obligations and case needs. Document justification for each data category and define deletion dates once the purpose ends.
Secure deletion
Deletion and anonymization procedures ensure data is removed securely. Regular audits help verify that no outdated records remain.
Cross border transfers
Cross border transfers require safeguards. When data moves outside the EEA, ensure appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms.
Retention during subject rights
Data subject rights during retention periods should be respected. Provide access and updates where required and communicate deletion timelines to data subjects.