Simon Clayton: Just how long are you allowed to keep that data?

Simon ClaytonReftechTech blogData retention+-
Laptop-stock-new-resized.jpg

Simon Clayton, chief ideas officer at RefTech, on how long data can be kept, what can be kept and how to determine what’s safe to retain.

 

Two of the core principles of European data protection law, under both the old and new regimes, are that the data you collect must be relevant to the ways you are using it and that it must not be retained for longer than is necessary. Exhibition organisers should consider these two standards together.

 

Because every exhibition’s circumstances are different, there is no set rule on the length of data retention. Some data is only relevant for the duration of your exhibition, but other data may be relevant for years – if you can properly justify it as such. It is important for you to have a clear and considered policy and a rationale to defend the terms of that policy. You can, however, devise an acceptable policy by asking these questions about your data:

 

  1. Why do we need this data?
  2. How much will it cost us to keep this data?
  3. What value might it have in future?
  4. What risks are there in keeping it?

 

Under the GDPR (General Data Protection Regulation) you will need to explain your data retention rationale in your privacy notices and terms and conditions. It is not enough to simply guess what a good data retention policy, or its length, should be. You have to prove that you have created a valid policy through the appropriate evaluation process.

 

Organisers wishing to retain data for future use should remove sensitive personal data - information pertaining to health, disability, ethnicity, or religion - from those records. For example, you may retain the contact data for this year’s visitors in order to invite them back next year. However, you should not retain data such as requests for a kosher meal, a wheelchair ramp, or a prayer room, as associating these requests with individuals is retaining sensitive personal data.

 

The retained data must be also be used solely for its original intended purpose. For example, the list of attendees should not be sold to third parties after the exhibition if this was not explicitly consented to at the time of registration.

 

You should also consider where your data is kept. Leaving data on the internet is far less secure than storing it on an internal server that is properly protected and secured. But even then, don’t be complacent; only last week, it was reported that a data breach at large UK software company Sage may have compromised personal information for employees at 280 UK businesses. The breech is thought to be as a result of an “unauthorised access" of data held on an internal server by someone using an "internal" company computer login.

 

What should you do with data concerning a Code of Conduct violation at an exhibition? Unless litigation ensues, the identifying details of both the victim and the perpetrator should be deleted after a reasonable period of time. For example, it is acceptable for the organisers of an industry exhibition to maintain a secure list of individuals banned from future exhibitions for unacceptable behaviour at previous events, but it is not acceptable for the details about those incidents, or who they were directed against, to be retained with that list.

 

Following the deletion of personal data, an account of the incident, anonymised to persons X and Y, can be retained securely and indefinitely for the purposes of institutional memory.

 

For more information and advice on data protection within the events industry, download our free white paper:

 

www.eventreference.com/promo-www/datasafety/download.php

Simon Clayton
Posted by Simon Clayton
PopularComments
Twitter Facebook Google+ LinkedIn

Related Stories

Movers & Shakers 12/04/17

People moves at Manchester Central, UBM and Eventopedia and more.

Future In 15 Episode 1: Showslice's Damian Oracki on the sharing economy in events

Show host Caleb Parker meets Damian Oracki, founder of Showslice, to understand more about how his company is changing the away the sharing economy can work in the events industry.

UFI announces Next Generation Leadership grant recipients

UFI, the global association of the exhibition industry, has revealed the five winners of its 2017 UFI Next Generation Leadership Grant, chosen by an international judging panel.

Others on EN

I'm a believer

I'm a believer

Sam Cande, group commercial director at Centaur Media, says no secret sales technique can compete with belief in a product.
Happy to help

Happy to help

Customer service can make or break a show, warns Media 10 event director Nathan Garnett.
Smoke and mirrors

Smoke and mirrors

James Moffat, head of event websites at LiveBuzz, shines a light on the smoke and mirrors surrounding SEO for websites.

CONFEX 2017 LIVE

Most Read Stories

I'm a believer

I'm a believer

Sam Cande, group commercial director at Centaur Media, says no secret sales technique can compete with belief in a product.
Lourda Derry: Making the connection

Lourda Derry: Making the connection

Lourda Derry, director of Easyfairs UK addresses the science behind operations and the profile of our audiences.
Steve Monnington: The Dealmaker in March

Steve Monnington: The Dealmaker in March

Steve Monnington of Mayfield Media Strategies, runs the rule over the latest global exhibition deals.

Latest News

Aztec partners with AEO for Masterclass events

Aztec partners with AEO for Masterclass events

Aztec Events has signed an agreement to be official AV provider for the AEO Masterclass events taking place in Birmingham and London in 2017.
StocExpo Europe celebrates successful 2017 edition  

StocExpo Europe celebrates successful 2017 edition  

StocExpo Europe, the international event for the tank terminal industry, is celebrating an eight per cent rise in visitors following its 2017 Rotterdam edition.
Making Pharmaceuticals to move to Ricoh Arena

Making Pharmaceuticals to move to Ricoh Arena

Pharmaceutical exhibition and conference Making Pharmaceuticals is moving to the Ricoh Arena this month, and is set to be the largest event of its kind to date.

Latest Features

My Working Life by David Chalmers

My Working Life by David Chalmers

The senior marketing director, Europe, at Cvent discusses how he got into the industry, his inspirational children and why he’s called The Doctor.
Feeding the five thousand

Feeding the five thousand

Exhibition catering and bars have undergone a transformation in recent years, and it’s not over yet.
A giant awakens

A giant awakens

From flying foxes to show launches, Ed Tranter tells the story of the unconventional world of MA Exhibitions.

Latest Galleries

A sneak peak at Somerset House's new event space

A sneak peak at Somerset House's new event space

Some of the industry’s leading event organisers were treated to an exclusive preview of Somerset House’s largest and most versatile indoor event space at an open house event on 19-20 April.
EN Awards 2017

EN Awards 2017

The best of the exhibition industry were out in force on 30 March at ExCeL London for the 11th annual EN Awards.
Natural & Organic Products Europe 2017

Natural & Organic Products Europe 2017

The 2017 Natural & Organic Products Europe celebrated its 21st edition earlier this month (2-3 April) as well as attracting its biggest attendance yet to ExCeL London.