Draft Regulation On Deletion, Destruction And Anonymisation Of Personal Data Is Submitted To Public Comments

The draft Regulation on the Deletion, Destruction and Anonymisation of Personal Data has been disclosed for public comments. These can be submitted through a dedicated form until 12 June 2017.

The draft regulation confirms that data controllers who are under the obligation to register with the Data Controller Registry must also prepare a data retention and disposal policy, as already set forth in the draft Regulation on the Data Controller Registry which was published for comments on 5 May 2017. Those who have no obligation to prepare a data retention and disposal policy, however, must still delete, destruct or anonymise personal data in accordance with the Data Protection Law and other regulations.