GDPR Data minimization in action. Danish Data Protection Authority (Datatilsynet) finds cab company Taxa 4×35’s records retention practices in violation of the GDPR data minimization principle.

The cab company removed names from records after two years. For another three years, all ride records remained, together with the person’s phone number.

Key points:

  • The removal of