During its recent advisory visits to 32 charities, the Information Commissioner’s Office (ICO) found that more than half “lacked a policy for retaining and disposing of personal data,” Out-Law.com reports. The ICO wrote that those charities “did not have formal retention schedules in place to ensure that the different categories of personal data held had been identified and were only being kept for an appropriate length of time,” noting, “Such retention/disposal schedules help safeguard against the indefinite retention of personal data which would be a breach of the act.” The ICO also found that one-third of the organisations lacked processes for “the regular weeding of personal data held,” the report states.
Full Story