Notes from the IAPP Canada: When deleting data too soon becomes the privacy risk
A session at the IAPP Canada conference examined a counterintuitive privacy problem: deleting personal data prematurely can itself create privacy risks, rather than reduce them.
Why this matters: Most privacy advice points one direction — collect less, delete faster. This flips that. There are real situations where deleting data too early can hurt the very people it was meant to protect. Think of someone needing records to dispute a decision, prove discrimination, or establish a legal claim. If the data is gone, so is their evidence. Retention is not just a compliance dial. Sometimes it is the only protection a person has.
Who should care: General readers · Privacy officers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.