What are Data Retention Guidelines?
GDPR Data Retention Policy: How to Manage Employee Data
Under the General Data Protection Regulation (GDPR), the principle of data minimisation and storage limitation means that personal data should be kept only as long as necessary for the purposes for which they are processed.
In other words, you shouldn’t keep personal data for longer than you need it. The specific retention period isn’t mandated by GDPR but is influenced by other laws, best practices, and the purpose for which the data is processed.