Storage Limitation, Integrity, Confidentiality In The General Data Protection Regulation

The principle of storage limitation is much more enhanced in the new EU General Data Protection Regulation (GDPR), than it was in the Directive 95/46/EC.

In fact, controllers were not particularly concerned with setting time limits for data retention so far. Under the new Regulation however the controller will have to determine the period of data retention, also taking into account the purposes of processing.

The Principle shall be read in light of the 'right to be forgotten', by which data subjects have the right to have their personal data erased, in some cases even before the end of the retention period. Everyone indeed, even if he/she has given consent to the processing of his/her data, has the right to withdraw that consent.