CNIL: Gui­de­li­nes on reten­ti­on and archiving

The French super­vi­so­ry aut­ho­ri­ty CNIL issued gui­de­li­nes on data reten­ti­on in July 2020; Gui­de pra­tique – Les durées de con­ser­va­ti­on). The gui­de­li­nes update the pre­vious recom­men­da­ti­ons of the CNIL of Octo­ber 11, 2005 on the archi­ving of per­so­nal data. They aim to pro­vi­de prac­ti­cal assi­stance in defi­ning the rules for data reten­ti­on and the app­li­ca­ble reten­ti­on peri­od; they express – simi­lar to the DIN-66398/­Gui­de­li­ne Extin­guis­hing Con­cept – but not to the reten­ti­on peri­od app­li­ca­ble to dif­fe­rent cate­go­ry of data in each case.

Howe­ver, the CNIL spe­ci­fies reten­ti­on peri­ods in a sepa­ra­te docu­men­ta­ti­on; “Réfé­ren­ti­el”). So far, two such réfé­ren­tiels have been published in the health sector: