Sometimes there are legal obligations that make the processing of personal data necessary. Take, for example, tax law or laws on the employment of workers. In order to comply with these obligations, companies and organisations must process certain data and sometimes retain it for years. This is regulated in the relevant laws, which often define precise retention periods for certain data.
Companies and organisations can rely on Art. 6 para. 1 lit. c) GDPR when processing this data.
Source: Satheesh Sankaran on Pixabay