article thumbnail

Over-Retention of Personal Data

Data Protection Report

The matter involved one of France’s largest insurers, SGAM AG2R LA MONDIALE, which was subject to an inspection by the French data protection authority (the CNIL), in 2019. The CNIL’s inspection included the insurer’s compliance with Section 5-1(e) of GDPR , which reads: Personal data shall be. Perhaps the CNIL’s €1.75

article thumbnail

Preparing for Litigation Before it Happens: eDiscovery Best Practices, Part Four

eDiscovery Daily

Who Uses Information Governance? A 2014 Rand study found that 44% of companies didn’t have any formal data governance policy and 22% of firms without a data policy had no plans to implement one. In addition, industry specific regulations in areas such as gaming or insurance can vary from state to state. Protection.

IT 31