Storage Limitation
What is Storage Limitation?
The principle under GDPR Article 5(1)(e) that personal data should be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
Terms that appear alongside storage limitation
Each of these is named in at least one of the same controls as storage limitation. The number is how many controls name both.
- purpose limitation 18 shared controls
- integrity 14 shared controls
- confidentiality 14 shared controls
- lawful basis 13 shared controls
- data minimisation 13 shared controls
- consent 12 shared controls
- accountability 12 shared controls
- gdpr 10 shared controls
Frameworks that govern storage limitation
What the standards actually require on storage limitation
Requirements naming storage limitation across 6 standards, quoted from the control text.
Art.12 fairness and transparency; Art.13 purpose limitation; Art.14 accuracy; Art.15 storage limitation - personal data shall be kept for no longer than is necessary for the purposes for which it is processed.
ETH-PDPP-Art.12-15 · Fairness/transparency, purpose limitation, accuracy, storage limitation →Data collected for specified, explicit, legitimate purposes; adequate, relevant, not excessive; kept no longer than necessary.
MALABO-Art13-P3 · Principle of Purpose, Relevance and Storage Limitation →Schedule 1, Fifth Principle: personal data must not be kept for longer than is necessary for the purpose(s) for which they are processed.
CAYDPA-P5 · Fifth Principle - Storage Limitation →Section 8B and related provisions of POPL 5741-1981 establish purpose limitation + lawful processing principles. (1) Section 8B Use Limitations: personal information in a database may be used only for purposes for which it was collected and registered + or for...
IsraelPPL-PurposeLimitation-UseLimitations-Sec8B-LawfulProcessing-Notice-Consent-DataMinimisation · Israel POPL Purpose Limitation + Section 8B Use Limitations + Lawful Processing Bases + Notice + Consent + Data Minimisation + Storage Limitation + Amendment 13 Modernisation →Standard 5 per Section 23 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be kept for no longer than is necessary for the purposes for which they are processed.
JM-DPA2020-Standard5-Retention-Sec23-Time-Limit-No-Longer-Than-Necessary-Erasure-Deletion-Anonymisation · Jamaica DPA 2020 Standard 5 - Retention + Section 23 + Time Limit + No Longer Than Necessary + Erasure + Deletion + Anonymisation + Retention Schedule + Legal Hold + Backup Considerations + Storage Limitation →Set storage-limitation and archival rules for research data, permitting longer retention for research subject to Article 89 safeguards.
RDCOC-RET-01 · Retention and Archival →Questions people ask about storage limitation
What is Storage Limitation?
Why is Storage Limitation important for compliance?
Which compliance frameworks address Storage Limitation?
Where can I learn more about Storage Limitation?
See how Storage Limitation applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.