II.5.b—Data Retention Limitations
>Control Description
Information may be retained in a form identifying or making identifiable7 the individual only for as long as it serves a purpose of processing within the meaning of 5(a). This obligation does not prevent organizations from processing personal information for longer periods for the time and to the extent such processing reasonably serves the purposes of archiving in the public interest, journalism, literature and art, scientific or historical research, and statistical analysis. In these cases, such processing shall be subject to the other principles and provisions of the EU-U.S. DPF. Organizations should take reasonable and appropriate measures in complying with this provision.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.