Question

A subscription streaming company retains customer payment card details, viewing history, and account credentials indefinitely. During a privacy review, the data privacy engineer finds that former customers who canceled their subscriptions more than three years ago still have all of this data stored in the active production database. The finance team argues the payment records may be useful for future win-back marketing campaigns. Which action best aligns the company with the data retention limitation principle?

Accepted Answer

Establish retention periods tied to the specific purpose each data category serves, and securely dispose of or de-identify data once its purpose has been fulfilled and no legal obligation requires its retention

Answer

Move all former-customer records to an encrypted cold-storage archive so the production database performs better while the data remains available indefinitely for potential marketing

Answer

Retain all data indefinitely but restrict access to former-customer records to the marketing team only, documenting the win-back purpose in the data inventory

Answer

Keep the data until a former customer submits an erasure request, since retaining data is permissible until an individual objects