4. of Retention/Removal
We store personal data on disk, even though we only need it temporarily and could just cache it in memory.
|
Threat |
|
|
|
You’re storing data on a disk that you don’t need, which is costing you money, putting you at risk, and can only be used for the purpose it was originally intended according to data privacy regulations. This is temporary data and could be queued until it is processed and then destroyed. |
|
GDPR |
Chapter 2, Art. 5 – 1. (e) |
|
CCPA & CPRA |
CCPA 1798.100. General Duties of Businesses that Collect Personal Information (a)(3) |
|
OECD |
N/A |
|
Mitigations |
|
|
|
... |
