Personal data may only be stored for as long as is necessary for the purpose or as required by statutory retention periods. A structured deletion concept is therefore essential for your data protection compliance.
You are here:
Legal background
The principle of storage limitation (Art. 5(1)(e) GDPR) states that personal data may only be stored for as long as is necessary for the purposes of the processing. After the purpose has been fulfilled or statutory retention periods have expired (e.g., from the German Commercial Code, Fiscal Code), the data must be deleted.
Our support for you
Compliance with the principle of storage limitation is a key requirement of the GDPR to minimise risks from excessive data storage.
As your external DPO, we advise you on developing company-specific deletion concepts that take into account both the purposes of processing and mandatory statutory retention obligations.
We support you in implementing processes that enable regular and verifiable data deletion.
Dr. Marc Störing
Managing Director Certified Information Privacy Professional, CIPP/E
