Odia Kagan of FoxRothschild reports:
GDPR Data minimization in action. Danish Data Protection Authority (Datatilsynet) finds cab company Taxa 4×35’s records retention practices in violation of the GDPR data minimization principle.
The cab company removed names from records after two years. For another three years, all ride records remained, together with the person’s phone number.
Read more on Privacy Compliance & Data Security.