Compliance Library Blog Product Sign In
EU-DORA-56-03 Data Governance 56 — Data Protection

Personal Data Retention Period Limitation

Description

ESAs and competent authorities must retain personal data only until the discharge of applicable supervisory duties and for a maximum period of 15 years, except where other sectoral acts provide...

Full Analysis & Evidence Requirements

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Sign In to View

Map this obligation to your AI systems

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started

Start your compliance assessment

Map obligations to your AI systems, identify gaps, and generate board-ready reports. Plans start at $149/mo.

Get Started