The best-selling book by Japanese cleaning consultant Marie Kondo counsels against keeping things that don’t “spark joy.” Personal data is susceptible to unauthorized access and use, so keeping it beyond its useful life presents risk to the organization (and the data subject) without corresponding joy to either. At the IAPP, we took inspiration from the EU General Data Protection Regulation and other laws around the world to do some data housekeeping as part of "Data Deletion Day." This post from IAPP Data Protection Officer Rita Heimes, CIPP/E, CIPP/US, CIPM, describes the legal, regulatory and practical motivations for undertaking data deletion exercises and shares one way to get started.
Full Story