How long can personal data be legally retained under the rules?

Personal data must not be intentionally retained in perpetuity and should only be kept for as long as it is strictly necessary. It can be legally retained for the ultimate fulfillment of the declared, specified, and legitimate purpose, or when the processing relevant to the purpose has been officially terminated. Furthermore, it may be rightfully retained for the establishment, exercise, or defense of legal claims, or for legitimate business purposes. The explicit conditions governing the strict retention of personal data are established in Section 19 IRR. “1. Retention of personal data shall only for as long as necessary: (a) for the fulfillment of the declared, specified, and legitimate purpose, or when the processing relevant to the purpose has been terminated; (b) for the establishment, exercise or defense of legal claims; or (c) for legitimate business purposes, which must be consistent with standards followed by the applicable industry or approved by appropriate government agency.” 20-May-26

About Nicolas and De Vega Law Offices

 Nicolas and De Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com/.