Data Life Cycle Management
CDPSE Domain 3, Data Life Cycle Management, tests how personal data is controlled from collection through disposal. Questions often ask which control belongs at which stage and what evidence proves it operates.
Core rules and concepts
- Life-cycle stages: collection, use, sharing or disclosure, retention and archiving, and disposal. Controls differ by stage but must connect.
- Maintain a data inventory and classification scheme. Record purpose, lawful basis, location, owner, recipients, retention trigger, and disposal method.
- Apply minimization and purpose limitation at collection; present notice at the point of collection; capture consent with granularity and support withdrawal.
- Set retention schedules by legal, regulatory, and operational need. Use event-based triggers, such as account closure plus a defined period. Legal hold overrides deletion.
- Dispose securely through deletion, crypto-shredding, or media sanitization aligned to NIST SP 800-88; verify across production, replicas, caches, and backups.
- Pseudonymized data remains personal data; anonymization must be assessed for re-identification risk.
Worked example
HR keeps recruiting records. Unsuccessful candidates should be deleted after a defined period, for example 12 months, unless a legal hold applies; successful candidates’ data transfers to the employee file under a new purpose. The applicant tracking vendor must delete on schedule and provide evidence. The reasoning: retention is tied to purpose and trigger, and disposal is verified.
Traps
Keeping data just in case because storage is cheap; deleting records under legal hold; treating pseudonymized data as anonymous; ignoring backups and archives; writing a retention schedule without enforcement evidence; collecting consent without a withdrawal path.