Logging retention for GDPR requests
Overview
DSAR responses need logs of processing sometimes—too short retention frustrates investigations; too long risks proportionality challenges.
Policy tiers
Security logs 90d–1y hot; analytics pseudonymized shorter; backups rotated per schedule documented.
Legal hold
Supersedes retention automatically—ticketing linkage mandatory.
Technical
Immutable logs complicate erasure—architecture legal consult when building.
Training
Support knows not to delete mailbox when DSAR ticket open—repeatable procedure doc.
Audit
Annual sampling DSAR mock drill timed SLA measurement.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...