By THEO LING and JONATHAN TAM
July 21, 2020
Every day companies around the world grapple with how best to protect critical business data. However, retaining personal information about an individual or employee for longer than necessary makes it more likely that the information will be subject to unauthorized or accidental access, use or disclosure. It could also violate the terms of the individual’s consent and reasonable expectations of privacy.
Baker McKenzie Partner Theo Ling and Associate Jonathan Tam recently outlined an approach on how to develop a privacy-enriched data retention policy, published in The Canadian Privacy Law Review. The piece discusses the steps organizations can take to determine and document how long to retain personal information collected across its operations.
