The Data Retention Guidance is designed to fill a miles-wanted gap inside the Information Commissioner’s Office’s reliable advice, and pursuits to demystify compliance with the aid of presenting a clear step by step framework.
GDPR – and the UK Data Protection Act 2018 – kingdom that “personal information must be kept in a shape that lets in identity of facts subjects for no longer than is important for the functions for which the non-public information is processed”.
However, there’s no set cut-off dates and each enterprise has its very own statistics retention needs.
HMRC, for instance, stipulates that groups must keep employees’ information for three years from the stop of the tax year they relate to. For financial information, the Financial Conduct Authority guide states special retention requirements, relying on the form of statistics that is held, and this may be anywhere between 3 to 10 years. Meanwhile, for the advertising industry, many consider facts have to be repermissioned each six to one year.
The Data Retention Guidance is designed to fill a much-needed gap in the Information Commissioner’s Office’s official advice, and aims to demystify compliance by providing a clear step by step framework.
GDPR – and the UK Data Protection Act 2018 – state that “personal data must be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed”.
However, there is no set time limits and each industry has its own data retention needs.
HMRC, for instance, stipulates that companies should keep employees’ information for three years from the end of the tax year they relate to. For financial records, the Financial Conduct Authority handbook states different retention requirements, depending on the type of data that is held, and this could be anywhere between three to ten years. Meanwhile, for the marketing industry, many believe data should be repermissioned every six to 12 months.
The DPN guidance been written by specialists from a broad range of organisations and sectors, and provides templates for different categories of data such as employee, marketing, and insurance records.
Case studies show the approach taken by organisations in the travel, charity and construction sectors.
DPN Data Retention Working Group chair Robert Bond, a partner at Bristows LLP, said: “The DPN has worked hard to publish a practical guide to a complex and evolving topic. It provides a set of tools to help with transparency and accountability in data retention.”
