Data Retention Policy

NTT Data’s data retention policy complies with the General Data Protection Regulation (GDPR). Core principles include:

• Purpose Limitation: Data is collected for specific purposes and retained only as long as necessary.

• Retention Periods: Defined for each data category based on legal and business needs.

• Periodic Review: Stored data is regularly evaluated for continued relevance and deleted when no longer needed.

• Regulatory Compliance: Supports data subjects’ rights, including the right to erasure.

• Documentation & Auditing: Activities related to retention and deletion are logged for transparency and accountability.

This policy promotes responsible data management and regulatory compliance.