Home FCA Handbook PDCOB PDCOB 11 PDCOB 11.6 Data retention
You are viewing PDCOB 11.6 Data retention as of . PDCOB 11.6 Data retention was last updated on 30/11/2024.

PDCOB 11.6 Data retention

Obligations on firms under general privacy laws

30/11/2024G

Firms are reminded of the need to comply with data protection legislation, including in relation to pensions dashboard self-asserted data.

30/11/2024R

Without prejudice to the application of the result matched startGDPRresult matched end where data has been obtained by the firm from data export, a firm:

  1. (1)

    must obtain a customer’s express consent to store that data; and

  2. (2)

    where consent is obtained, is permitted to store that data for 30 days from the date the customer consented in accordance with (1) above, after which period it must be deleted.

30/11/2024R

A firm is not permitted to store data obtained from data export where:

  1. (1)

    the customer does not expressly consent; or

  2. (2)

    the customer elected to export the data to themselves only.