To Be, Or Not To Be… Compliant, That Is The Data Retention Question

This is the latest in a series of articles, initially published in The Global Legal Post, on various technical themes in language which can be understood by those who prefer to use technology rather than immerse themselves in it. These are written by Paul Longhurst at 3Kites with Kemp IT Law contributing.

Back in the day when GDPR was just a twinkle in the eye of a Brussels law maker, firms held on to documents and timesheets (with their narratives which on, say, clinical negligence cases may be highly sensitive) for as long as their paper or IT systems' storage would allow. This might sometimes stretch into several decades without anyone having to justify why. With the introduction of the GDPR, attitudes have changed... but many storage habits have not. Paul Longhurst of 3Kites gives the systems viewpoint whilst Richard Kemp of Kemp IT Law covers the regulatory requirements.