Storage Limitation Based on Processing Necessity, v1.0

Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 5(1)(e).

Assessment Step

1
Storage Limitation Based on Processing Necessity (StorageLimitationBasedonProcessingNecessity)
Does the entity ensure that personal data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.

Conformance Criteria (1)

Storage Limitation Based on Processing Necessity
The data controller must ensure that personal data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
Citation
GDPR
Art. 5(1)(e), Recital 39