Compliance
Retention periods and disposal
We set a period and a basis for each data category, put periodic disposal on the calendar, and keep its records.
- KVKK
Defining a retention period means nothing on its own; if you never delete what has expired, the policy stays on paper. The most frequently skipped step is the disposal itself, and the record of it.
Scope
Setting a retention period and its basis per data category
Writing the retention and disposal policy
Establishing the periodic disposal calendar
Choosing the disposal method by data type
Keeping disposal records
What we deliver
Retention period table with its bases
Retention and disposal policy
Periodic disposal calendar
Disposal record template
The process for this service
Mapping to the inventory
How long each data category is currently kept is established.
Period and basis
Statute, limitation period or business need, whichever applies, is written down.
Calendar
Periodic disposal is scheduled at intervals of no more than six months.
Records
Data disposed of, the date and the method go on record.
Questions about this service
Our products supporting this service
Other services in the same pillar
- KVKK compliance programme
- Policies, procedures and texts
- Personal data risk analysis
- VERBIS registration and updates
- Outsourced data protection officer
- Data subject request management
- Cross-border data transfers
- Awareness training
- Compliance audit
- ISO 27001 implementation and audit readiness
- ISO 27701 privacy information management system
See where you stand in 20 minutes
The free initial assessment maps your current state and tells you which step should come first. You are not committed to anything afterwards.
Look at it yourself first
A twenty-five question KVKK compliance test with per-area scores and a priority recommendation. No sign-up.
Start the compliance testLet's look together
We discuss your current state and work out which step comes first and how long it takes.
Request a conversation