CLAIM-2026-08-11-06
GDPR Article 5(2) provides that the controller shall be responsible for, and be able to demonstrate compliance with, the principles in Article 5(1), which include the storage-limitation principle in Article 5(1)(e).
Why it matters
Demonstrability, not retention, is the clause that bites. It is why deleting the volume is a compliance event.
Sources
- intersoftco2026art