3 ms·
You can answer no to that if you only store information that you legally have to keep. Chances are, that's not the case.
by outadoc 6y ago
You can answer no to that if you only store information that you legally have to keep.
Chances are, that's not the case.
- remus 6y agoThere's actually 6 lawful bases for processing data https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/#what https://ico.org.uk/for-organisations/guide-to-data-protectio... though deciding which is applicable in a given situation is not straightforward. The legal basis is actually quite broad. For example, most companies need to keep records for accounting purposes for several years which would count as a lawful basis. Another example would be keeping client data in case you need to protect yourself against potential future litigation e.g. a gym may need to protect themselves against personal injury claims (otherwise you could injure yourself, ask them to delete the records and then sue them).
- closeparen 6y agoAs the chart explains, only public interest and legal requirement trump the right to erasure. Legitimate interest does not. A legal requirement is "you shall retain these data for N years or face prison time" not "this might be helpful in a lawsuit"
- user5994461 6y agoCompanies legally have to keep a ton of information as soon as they process any payment. High chances are your company gets money from its customers so it can keep all kind of information almost indefinitely. The only notable exception is ad business because "users" are not customers and do not enter any transactions.