A proper management of data retention during its life cycle is essential for 3 reasons:
- to manage cyber risks
- to be compliant with the GDPR and
- to enable the protection of the company’s information assets
Data protection through anonymization, pseudonymization or encryption techniques allows protecting data, whatever the storage support used.
Backup is an essential step, especially in the event of cyber attacks. It allows the recovery of data in a limited time and thus contributes to the continuity of the company’s activity without a major impact.
Finally, the elaboration and implementation of a business continuity policy (BCP) and disaster recovery plan (DRP) must include procedures for backups and restoration of retained data.