R-04 Entra & Security
Deleting data nobody wants to delete
IT asks how long data should be kept. The business says “forever, just to be safe”. Legal says “as short as possible”. Then nothing happens for two years.
A responsibility problem in disguise
ESPRESSO-MOMENT
This is not a technical problem. It only lands on the table as a technical problem because nobody objects there.
Four steps that hold up in the steering committee
Name data types, not systems. One named person per data type. Derive the periods from the German Commercial Code (HGB), the Fiscal Code (AO) and the GDPR. And run in simulation mode for at least thirty days.
If nothing gets deleted after that, the technical troubleshooting will help.
Ferdi Lethen-Oellers
Senior Modern Workplace Consultant at amexus, Microsoft MVP, author of “Microsoft 365 Administration für Dummies”.