Following the success of their Legitimate Interests Guidance, the DPN‘s Data Retention Working Group, chaired by Bristows partner Robert Bond, has launched its Data Retention Guidance.

The DPN’s industry-led guidance walks businesses through the steps they need to take to establish GDPR-compliant data retention practices:

• deciding on retention periods
• creating a data retention policy and schedule
• implementation and ongoing oversight

The framework has been written by leading privacy professionals from a broad range of organisations and sectors, including Bristows’ Robert Bond and Marc Dautlich, who provided examples of data retention policies. It has handy templates for different categories of data such as employee, marketing, and insurance records. Case studies show the approach taken by organisations in the travel, charity and construction sectors.

Robert Bond said “The DPN has worked hard to publish a practical guide to a complex and evolving topic. It provides a set of tools to help with transparency and accountability in data retention.”

You can download the guidelines on the DPN’s website.