Soal aims to retain data only as necessary to carry out its operations effectively and in alignment with its mission. The requirement for data retention varies greatly with the type of data and the reason for its collection. Soal works to ensure that data is retained only for the period required to fulfill the purpose for which it was collected and is fully deleted when no longer necessary. This policy outlines Soalโs guidelines on data retention and should be consistently applied throughout the organization.
This policy encompasses all data gathered by Soal and stored on systems and media owned or leased by Soal, irrespective of location. It is applicable to both electronically collected and stored data (including photographs, video, and audio recordings) and data gathered and stored as hard copy or paper files. The necessity to retain specific information may be necessitated by federal or local law, federal regulations, legitimate business purposes, and the EU General Data Protection Regulation (GDPR).
Soal retains only data necessary to conduct its operations effectively, fulfill its mission, and comply with applicable laws and regulations. Reasons for data retention include:
Soal aims to minimize data duplication wherever possible. Nonetheless, there may be instances when for operational or other business reasons, data needs to be held in more than one place. This policy applies to all data in Soalโs possession, including duplicate data.
Soal has established the following guidelines for retaining personal data:
Data destruction ensures the responsible and efficient management of the data controlled and processed by Soal When the data retention period expires, Soal will actively destroy the data covered by this policy. If an individual believes there is a valid business reason why certain data should not be destroyed at the end of a retention period, they should identify this data to their supervisor and provide reasons why the data should not be destroyed. Exceptions to this data retention policy must be approved by Soalโs data protection officer in consultation with legal counsel. In rare instances, a litigation hold may be issued by legal counsel prohibiting the destruction of certain documents. A litigation hold remains in effect until released by legal counsel and prevents the destruction of data subject to the hold.