Remove tag record-retention-2
article thumbnail

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

The order also requires that the company destroy personal data for which it had not received consent and to create a document retention and destruction policy. The order also, in Section IX, set forth data destruction requirements and a data retention policy. Cerebral disclosed that its breach impacted nearly 3.2