Ex-Employee Data Retention Policies Face New EU Privacy Regime

EU employers should adopt policies on how long they will keep information on former employees to ensure compliance with the bloc’s new privacy regime, privacy attorneys told Bloomberg Law.

Companies will need to take into account both limitations on retaining personal data set out in the EU General Data Protection Regulation, which takes effect May 25, 2018, and legitimate legal needs to hold on to information on former employees long after they leave the company.

The GDPR doesn’t set specific time limits on how long companies may retain data on individuals no longer in their employ. But the Article 29 ...