Skip to content
Espresso Data Privacy
EN
Request a demo

Data deletion concept and retention schedule

A data deletion concept and retention periods you can actually implement

Together with data protection, business units and IT, we develop the data deletion concept, the retention periods and the deletion architecture – based on the DIN EN ISO/IEC 27555 standard, the successor to DIN 66398. With Privacy Register, we enter the retention periods straight into the retention schedule.

Request this service All services

Approach

  1. 1

    Inventory

    Which personal data is processed where, and why it is retained.

  2. 2

    Retention periods and rules

    In workshops with the business units: how long, from when, and what happens afterwards.

  3. 3

    Deletion architecture

    We define which system deletes when and how exceptions are handled.

  4. 4

    Approval

    You approve the data deletion concept; with Privacy Register, also the retention periods in the retention schedule.

What you receive

  • Data deletion concept

    Goals, data types, retention periods, responsibilities and proof of deletion.

  • Retention periods per data type

    Deletion rules per data type with retention reason and responsible persons – with Privacy Register, directly in the retention schedule.

  • Deletion architecture

    Which system deletes what and when, and how this is proven.

  • Retention schedule

    With Privacy Register: the retention periods recorded and approved.

Enquiry

Is this service right for you?

Drop us a short note about what you need. We will get back to you with a proposal for scope, process and timing.

Request this service

Next

Architecture and integration

Implement the concept technically and connect the applications.

Go to the service

Frequently asked questions about the data deletion concept

Can we book the data deletion concept without Espresso?

Yes. If you use Espresso, the result serves directly as the basis for the setup.

Which standard do you follow?

We follow DIN EN ISO/IEC 27555, Guidelines on personally identifiable information deletion. It has replaced DIN 66398.

Does this replace a legal assessment?

We develop retention periods and rules from a subject-matter perspective. The legal assessment remains with your legal department or data protection advisers.

How do we get started?

With a 30-minute demo. Afterwards, we will work out together which step is right for you.

See Espresso in 30 minutes

We will show you the cockpit with sample data – and discuss where you should start.

Request a demo

or write directly to info@espressodataprivacy.com