Consent & Preference Management Data Retention Best ...

Quoted on this wiki

Every place a page here uses this source, in the order the words come in it.

1. If the personal data relates to prospective customers and came from a third party, then there are two scenarios: If the contact took place, you should keep the data for a reasonable period of time after the contact to support any further requests from the individual. If no contact took place, you should delete the data promptly after the permission to contact expires. “Evidence of opt-out needs to be kept for as long as possible.” Defining Your Data Retention ScheduleCopy Link

   In Retention documentation and audits

2. If the personal data relates to prospective customers and came from a third party, then there are two scenarios: If the contact took place, you should keep the data for a reasonable period of time after the contact to support any further requests from the individual. If no contact took place, you should delete the data promptly after the permission to contact expires. “The information retained should be kept to the bare minimum and full details in the consent receipt should be deleted/destroyed after the recommended periods.” Defining Your Data Retention ScheduleCopy Link

   In Suppression list retention