Drone exam · Privacy and data protection

A project folder is deleted from the main server, but copies remain on SD cards and an engineer's laptop. Has the retention process really been completed?

Answer

Not necessarily. The deletion process should account for working copies, removable media, synchronised devices, and backups according to the organisation's retention and recovery design.

Explanation

Personal data spreads easily during field work. A retention policy is effective only when it covers the places where data actually exists.