GDPR, Different retention periods depending on the infotypes

[former_member1122733]

Hello,

We are preparing the implementation of GDPR standards using the ILM module.

Our company hired a lawyer to help us define the retention periods for SAP HR data.

The lawyer advised us to define retention periods according to the type of data contained in the infotypes. so we ended up with different durations depending on the infortypes. For example:

infotypes 00, 01, 02, 03 have a retention period of 6 years and will be purged after this period. on the other hand, infotypes 04, 06, 07, 08 have a retention period of 5 years and will therefore be purged before infotypes 00,01,02,03.

Is there a risk of setting different retention periods?

Should a single retention period be defined for all infotypes to ensure the completeness of employee data?

Question for people who have been able to configure the ILM module for a company In France: can we configure a single retention period for all infotypes while remaining compliant with GDPR standards?

Thanks in advance