AI Enablement playbook/Module 4 · Data protection & POPIA

Day 37 / 100 · Data protection & POPIA · Retention

Keep it only as long as you need it.

POPIA section 14 says records must not be kept longer than their purpose requires, unless a law, a contract or the person's consent allows it. AI creates new places for data to linger.

The rule

Section 14

  • Keep records only as long as the purpose needs
  • Longer only where law, contract or consent allows
  • Then delete, destroy or de-identify
  • Do it so it can't be reconstructed

Where AI data lingers

Check These

  • Chat histories and shared threads
  • Uploaded files and attachments
  • Transcripts and call recordings
  • Knowledge bases built from your documents
  • Vendor logs and backups

Source: popia.co.za ↗

Set a clock on every copy.