Nearly all organizations create and retain personal information about individuals. New and emerging privacy regulations restrict the retention of this personal information to “no longer than necessary” for a legitimate business need. Under most privacy compliance regimes, individuals have the right to request that their information be deleted or erased.
These new requirements are driving organizations to examine what personal information they store, where they store it, and to impose rules on how long they keep it.
