Employers usually need to have a knowledge retention coverage that works for all of their worldwide operations.
We have a look at the challenges with this strategy and how one can make it work in observe.
Why hassle with knowledge retention insurance policies?
Following the introduction of the European normal knowledge safety regulation (“GDPR”) in 2016, many HR professionals might be accustomed to the message that “you may solely preserve knowledge for so long as you want it.” This identical precept additionally now lives on within the UK, post-Brexit.
However why do companies even care?
To make some apparent factors: What does the GDPR say?
Briefly, the GDPR (together with the UK GDPR) solely permits knowledge retention for as long as it's moderately essential to retain it.
The perpetual downside is that the GDPR doesn’t present any extra particular steerage than that.
This isn't uncommon in relation to the GDPR, which frequently units out key rules to be utilized throughout all of Europe however doesn't present any steerage on the finer particulars.
The flip facet of GDPR ambiguity is that it offers native regulators and (in lots of circumstances) employers themselves some discretion in figuring out what knowledge ought to be retained and for the way lengthy (topic to any particular nation legal guidelines regarding native retention necessities).
Within the UK, for instance, our regulator tends to take a lightweight contact and principally defers to employers offered they've taken a wise strategy to issues.
Usually, so long as what you resolve is “cheap” and you may justify it, and you've got documented your pondering, you're unlikely to get into hassle.
The place throughout Europe is usually related, however it does differ, and a few native regulators are stricter than others.
How do employers usually resolve on their knowledge retention insurance policies?
Some employers desire granular insurance policies, allocating separate retention insurance policies to totally different classes of knowledge in every jurisdiction, to try to obtain the “gold” customary of compliance.
This strategy will work nicely the place retention could be automated, however for a lot of employers it may be tough to attain.
Alternatively, different companies desire to place a less complicated retention coverage in place with a handful of “buckets” of knowledge and retention durations, relatively than a sophisticated matrix that they don't have any likelihood of having the ability to adjust to in actuality.
This isn't a “gold” customary GDPR strategy however could merely be extra reasonable.
How does that work internationally?
Deciding on a knowledge retention technique turns into trickier the place a enterprise operates in a number of international locations.
You'd be forgiven from pondering that GDPR signifies that all retention insurance policies match neatly collectively however as famous above, sadly this isn't the case.
To take one instance, in Bulgaria, employment contracts and any amendments/termination technically should be saved for 50 (sure, fifty) years after termination of employment.
A 50-year retention coverage is prone to be a really apparent purple flag in different jurisdictions.
Can worldwide retention insurance policies work?
Worldwide “one measurement matches all” retention insurance policies are usually inconceivable to attain with 100% perfection, however companies can usually decide on an appropriate risk-balanced strategy that's as near one-size-fits-all as could be hoped for.
As you'd count on, the extra international locations a enterprise is attempting to cowl, the tougher this may be.
Our high suggestions are as follows: If you happen to’d like to debate worldwide knowledge retention or knowledge privateness extra usually or for a replica of our UK or Irish obligatory retention durations, please get in contact with Deborah Margolis, Darren Isaacs or your regular GQ|Littler contact.
Info contained on this publication is meant for informational functions solely and doesn't represent authorized recommendation or opinion, neither is it an alternative to the skilled judgment of an lawyer.