INTRA/DP/DP011Retention and disposal of business records
The period for which the organization keeps what it holds, and the manner of its destruction.
| Control | Jurisdiction | Source | What it establishes | Prerequisite or recommendation |
|---|---|---|---|---|
| DP011/BEMandatory | Belgium | Convention collective de travail n° 81 du 26 avril 2002Conseil national du Travail · read 29 Aug 2026 | Four purposes for which network communication data may be monitored, collection in the aggregate rather than by name, and individualization as a separate operation with conditions of its own. | Whether personal data are kept, where they are kept, and for how long are among the things stated to the workforce before the monitoring begins. |
| DP011/ITMandatory | Italy | Provvedimento n. 243Garante per la protezione dei dati personali · read 11 Aug 2026Provvedimento n. 165, ITAS MutuaGarante per la protezione dei dati personali · read 16 Aug 2026Provvedimento n. 364, guidance document on email metadata in the workplaceGarante per la protezione dei dati personali · read 11 Aug 2026 | That ninety days of metadata and browsing logs, kept without the procedural steps, draws a fine, the reasoning turning on the steps and not the purpose. | Twenty-one days is the outer limit for email metadata before the article 4 route is engaged, and ninety days of it alongside browsing logs has drawn a fine. A five year backup of everything passing through the mailboxes, kept to preserve the information estate, was held unlawful where no notice given to the staff described it. |
| DP011/NOMandatory | Norway | Forskrift om arbeidsgivers innsyn i e-postkasse og annet elektronisk lagret materialeArbeids- og inkluderingsdepartementet · read 29 Aug 2026 | When an employer may look into a work mailbox or a worker’s personal areas on its equipment, that monitoring of internet use is outside what it may do at all, and that the regulation cannot be contracted around. | What is left in the mailbox and in the worker’s own areas, and is not necessary for the daily running of the undertaking, is deleted within a reasonable time of the employment ending. |