How to Write a GDPR Data Retention Policy – with template

  Under the GDPR (General Data Protection Regulation), organisations must create a data retention policy to help them manage the way they handle personal information. But how long can you keep personal data for? If you keep sensitive data for too long – even if it’s being held securely and not being misused – you may still be violating the Regulation’s requirements. That might sound strict, but there’s a good reason for it. In this blog, we explain why that’s the case, how data retention policies work and how you can create one in line with the GDPR’s data retention

The post How to Write a GDPR Data Retention Policy – with template appeared first on IT Governance Blog.

Stormous Ransomware gang targets North Country HealthCare, claims 600K patient data stolen

Ransomware group Stormous claims it stole data from 600,000 North Country HealthCare patients across 14 sites in northern Arizona. The Stormous ransomware gang claims it has stolen personal and health data belonging to 600,000 patients from health provider North Country HealthCare. North Country HealthCare is a nonprofit, federally qualified health center (FQHC) based in northern […]