|
|
|
|
|
by joshuakelly
2028 days ago
|
|
In general, the consumer data privacy laws in regions where Google has significant regulatory exposure do not permit indefinite data retention of PII. My speculation is that Google sees an across the board, 2-year inactivity period as the best option to mitigate regulatory exposure because a plain reading of, for example, Rec. 39 is that a maximum retention period must be defined as a policy organizationally. |
|