> How can we be required to delete IP addresses in our logs yet also be required to keep access audit logs for 7 years. IANAL but from what I read and heard (i

> How can we be required to delete IP addresses in our logs yet also be required to keep access audit logs for 7 years. IANAL but from what I read and heard (indirectly) from lawyers at work this is not a problem. GDPR doesn't apply to data that you are required to keep for other legal reasons.