Back to the text
Personal Data Protection Order, 2025 · s 23
Suggest a correction
Tell us what is wrong in this text. We check every suggestion against the official version before we change anything.
Personal Data Protection Order, 2025 · s 23
Tell us what is wrong in this text. We check every suggestion against the official version before we change anything.
An organisation shall cease to retain its documents containing personal data, or remove the means by which the personal data can be associated with particular individuals, as soon as it is reasonable to assume that -
28
(a} the purpose for which that personal data was collected is no longer being served by retention of the personal data; and
(b} retention is no longer necessary for legal or business purposes.