Old data still counts
Old customer lists, past job applications and files from former staff can sit on drives and in inboxes for years.
If that data leaks, it can still cause harm. Under the PDPA, organisations should stop keeping personal data once it no longer serves a business or legal purpose.
Where forgotten data hides
Check these places first.
- Shared drives and old spreadsheets.
- Email attachments.
- Downloads folders.
- Old laptops and phones.
- Cloud apps you stopped using.
How to start clearing it
Follow these steps.
- List the types of data you hold and why you need each one.
- Set how long you keep each type.
- Delete what is past that date, so it cannot be recovered.
- Record what you deleted and when.
- Repeat on a regular schedule.