Missing Data Retention Policy Implementation

Detects data storage without associated TTL, expiry, or cleanup mechanisms, indicating missing data retention policy.

zakirkun d7eb9c2 2 files · 2.0 KB Updated

File contents

Missing Data Retention Policy Implementation

Overview

GDPR Article 5(1)(e) requires data to be kept no longer than necessary. Storing user data indefinitely without purging mechanisms violates the storage limitation principle.

Common issues:

  • Log files without rotation or TTL
  • Database records never deleted
  • Caches that accumulate PII indefinitely
  • Backups stored without expiration

Remediation

  • Implement automated data purging for records beyond retention period
  • Set TTL on Redis/Memcached keys containing personal data
  • Configure log rotation with appropriate retention
  • Document and enforce data retention policy

zakirkun/ice-tea/tree/main/skills/privacy/data-retention-missing commit d7eb9c2b77

Frequently asked questions

npx skillmds@latest add zakirkun/missing-data-retention-policy-implementation