4 ms·
Sure, but that time period is usually limited to 30 days, with an additional 30 day extension allowed if you contact the person and tell them you need more time
by avianlyric 4y ago
Sure, but that time period is usually limited to 30 days, with an additional 30 day extension allowed if you contact the person and tell them you need more time.
You can’t just declare that it take years to delete data, GDPR sets reasonable limits on how long a company can delay true deletion.
- LunaSea 4y agoThe GDPR gives limits on answering, I'm not sure it gives a limit on actually deleting the data everywhere. Various types of data have various retention times for various reasons, some being legal reasons.
- EUROCARE 4y agoEven if the company just issued you an invoice, that makes it obligated by law to hold onto your PII for the next 5 years - and GDPR of course has an exception for that.
- avianlyric 4y agoSure, but that data doesn’t fall under your right-to-be-forgotten, so any obligations that apply to the right-to-be-forgotten are irrelevant.
- yuliyp 4y agoThe GDPR says it's 30 days with a 2 month extension. This allows for having safe soft deletion and backup retention policies without running afoul of it.
- telotortium 4y agoDo you have a link for that?
- yuliyp 4y agohttps://gdpr.eu/article-12-how-controllers-should-provide-personal-data-to-the-subject/ https://gdpr.eu/article-12-how-controllers-should-provide-pe... section 3
- telotortium 4y agoThanks!
- M2Ys4U 4y agoThe GDPR says data should be deleted "without undue delay", it doesn't give a hard deadline.