Storage limitation
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
Storage limitation - Keep data in identifiable form no longer than necessary for the purpose; delete or anonymise when no longer needed.
In the CIPP/E body of knowledge, Storage limitation comes up under Ch 14.5 - Personnel records; Ch 6.6 - Storage limitation; IAPP Training · Module 4 - BoK III.B.
Storage limitation in context
- [[Storage limitation]] (Article 5(1)(e)) means personal data must ==not be kept longer than necessary== for the purpose; once no longer needed, it must be ==securely deleted or anonymised==. (Storage limitation)
- This topic also drills the most-tested skill: ==telling the principles apart== - purpose limitation (why), data minimisation (how much), storage limitation (how long), accuracy (correctness), and integrity and confidentiality (security). (Accountability and telling the principles apart)
- The GDPR's [[Article 5]] principles - ==lawfulness, fairness and transparency==, ==purpose limitation==, ==data minimisation==, ==accuracy==, ==storage limitation==, ==integrity and confidentiality== and ==accountability== - sit on top of the eight [[OECD principles]]. (Module 4 · Data processing principles (OECD + Article 5))
Where Storage limitation is covered in the CIPP/E study notes
- Storage limitation
- Storage of personnel records
- Module 4 · Data processing principles (OECD + Article 5)
Related terms
- Data retention policy
- Statutory retention period
- Secure archiving
- Article 5
- OECD principles
- Purpose limitation
- Data minimisation
Test yourself on Storage limitation
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.