UKISUG ASC SIG Meeting for GDPR

Name of event: UKISUG ASC SIG

Date and time: 14 March 2018

Venue: Emirates Old Trafford Cricket Stadium, Manchester

EPI-USE Labs is co-hosting the Audit, Security and Control Special Interest Group of the UK and Ireland SAP User Group (UKISUG). The day is dedicated to the General Data Protection Regulation (GDPR), and helping companies running SAP to find solutions to become GDPR compliant.

One of the sessions will be presented by Paul Hammersley, EPI-USE Labs' Head of Landscape and Data Services, on the topic of:

GDPR: are retention periods a minimum or a maximum?  

Paul's session will focus on the following:

Different role players within an organisation have different viewpoints when it comes to retention periods. Most companies have a policy around keeping data for a set period. However, GDPR is now highlighting whether information should be actively removed after that retention period. IT teams may have seen it as a minimum period, and potentially kept data longer for diligence, while auditors and Data Protection Officers (DPOs) might understand that data should be removed after the end of this period.