Sign in Subscribe

Data Retention

Data Retention covers how long organizations keep personal data and when it must be deleted, anonymized, or otherwise disposed of. This tag addresses retention periods, storage limitation, retention schedules, legal and business requirements, deletion practices, litigation holds, and data lifecycle management across privacy and data protection laws, including the GDPR, CCPA, and other U.S. state privacy laws.

Wajam: When Bundled Adware Failed Canada’s Meaningful Consent Test

Wajam: When Bundled Adware Failed Canada’s Meaningful Consent Test

Wajam shows that meaningful consent under PIPEDA requires more than an “Accept” button. The OPC found failures involving bundled software distribution, misleading interfaces and disclosures, ineffective withdrawal, excessive retention, and inadequate safeguards.

Ireland v. Parliament: The EU Had Power to Require Data Retention—But That Wasn’t the End of the Story...

Ireland v. Parliament: The EU Had Power to Require Data Retention—But That Wasn’t the End of the Story...

In Ireland v. Parliament and Council, the CJEU upheld the Data Retention Directive’s legal basis because it harmonized obligations on communications providers—but left unresolved whether mass data retention violated fundamental rights, the question later decided in Digital Rights Ireland.