Mobile app data privacy - Length of record retention in a software app

#1
Hi everyone,

For how long should customers' data be stored or the length of record retention in a software app, for example, after the license has lapsed. Do customers always have access to their data or is this data destroyed after a certain amount of retention time? Thanks!
 
Elsmar Forum Sponsor

mihzago

Trusted Information Resource
#2
That depends on the type of data and locality. If, for example, you're in the US and the data stored on the app is ePHI, then "HIPAA requires that business associates and covered entities retain the following for at least six years from creation date or last effective date, whichever happens to be later". Some states, for example Massachusetts, have even longer retention periods of 7 years.
In other jurisdictions (e.g. Canada, EU), there is no specified period, so you have to define it on your own considering the requirement that the "Personal Information shall only be retained as long as necessary for the fulfillment of those purposes behind data processing."

Make sure you document the retention time and the justification in your procedures, and explain how you handle access and retention in terms of use or contracts with your customers.
 
Thread starter Similar threads Forum Replies Date
R Validation of mobile app and cloud servers for data security IEC 62304 - Medical Device Software Life Cycle Processes 4
S In a risk analysis, how can we tie mobile app security breach to ISO 14971? 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 4
S Medical device mobile app UDI - Where is the UDI labelled? Other US Medical Device Regulations 1
A End of Life for Medical Mobile App (Stand Alone Software) Medical Information Technology, Medical Software and Health Informatics 5
S Do you test the download and installation of a mobile medical device app? Software Quality Assurance 6
L Mobile Medical App - Understanding 21 CFR Part 820 Requirements 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 3
J Mobile Medical Device App Validation Guidance vs. GPSV? 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 3
K Medical Application Classification in Controlled/Uncontrolled by Mobile App State. 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 6
W FDA's final guidance for Mobile App will final in coming weeks. Medical Information Technology, Medical Software and Health Informatics 0
J Are DAM tools, Mobile application, clinical dashboard, etc. considered accessories to medical device or supportive functions? Manufacturing and Related Processes 4
G Alternatives to time apps (mobile applications)? Coffee Break and Water Cooler Discussions 3
M Challenges Incorporating Mobile Devices into Medical Devices Other Medical Device Regulations World-Wide 1
S ISO 17025 Requirements for Mobile On-site Calibration ISO 17025 related Discussions 2
E Wearable Medical Device & Mobile Apps in US 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 1
E Wearable Medical Device & Mobile Apps in EU EU Medical Device Regulations 1
M Ranking Changes for Non-"Mobile-Friendly" Sites Forum News and General Information 10
Q File Management system in Cloud for Medical Mobile Apps IEC 62304 - Medical Device Software Life Cycle Processes 2
C Mobile Application which collects Physiological Data from a Medical Device Other Medical Device and Orthopedic Related Topics 1
R Mobile Auto Valeting Services - Waste Disposal (Environmental Perspective) Miscellaneous Environmental Standards and EMS Related Discussions 3
Ajit Basrur FDA issues Final Guidance on Mobile Medical Apps (Applications) US Food and Drug Administration (FDA) 2
E Medical Device supplemented with a Mobile Application IEC 62366 - Medical Device Usability Engineering 4
D Regulation Approach on Mobile Application which is Medical Device Acccesory EU Medical Device Regulations 1
sagai Mobile Medical Applications Final Guidance Released Other US Medical Device Regulations 0
Mikael Portable/Mobile Washer, Laundry Reviews Coffee Break and Water Cooler Discussions 2
I Mobile Equipment - Six label printer to be used in different areas Qualification and Validation (including 21 CFR Part 11) 4
C Mobile Medical Device for MDD - Medical Image Viewer EU Medical Device Regulations 2
S Mobile Phone based Diabetes Monitoring Technology Medical Information Technology, Medical Software and Health Informatics 2
M Mobile Medical Platforms - How to deal with Supplier Hardware/Software Changes? 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 2
S FDA Draft Guidance on Mobile Medical Applications US Food and Drug Administration (FDA) 1
bio_subbu FDA issues first draft guidance document on Mobile Medical Applications 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 15
R How to conduct the Threshold Test of Mobile Equipment specified in 3rd edition? IEC 60601 - Medical Electrical Equipment Safety Standards Series 35
B What is the difference between Mobile and Portable? Other US Medical Device Regulations 9
Marc Oscar-Mayer Weiner Mobile - West Chester, Ohio 2PM 29 March 2011 Coffee Break and Water Cooler Discussions 16
A Mobile Touchscreen Devices in a Manufacturing Environment Manufacturing and Related Processes 11
W Mobile equipment qualification? Manufacturing and Related Processes 1
I Employment Contract Review - Categories of International Mobile Workers Contract Review Process 1
D Need suggestions for a mobile Spectrophotometer (a.k.a. color meter) Inspection, Prints (Drawings), Testing, Sampling and Related Topics 2
K CE Marking for Mobile Air Compressors driven by a Diesel Engine CE Marking (Conformité Européene) / CB Scheme 2
kisxena 510(k) filing for GSM (Global System for Mobile Communication) technology? Other US Medical Device Regulations 9
Marc What 'mobile' used to mean After Work and Weekend Discussion Topics 6
ScottK Been getting phone calls on my mobile with a single digit area code? (USA) After Work and Weekend Discussion Topics 7
V Testing Mobile Platforms - How to write automations for mobile GUI testing Software Quality Assurance 0
C Learning Curves - Biggest Process "VARIABLE" is mobile workforce ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 19
M ISO certified Mobile Telecommunications Operators ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 1
C Is it required to put"Rx only" on the home page of an app? Medical Device and FDA Regulations and Standards News 4
G App - Local regulations applicable EU Medical Device Regulations 2
Marc Informational Apple Tells App Developers To Disclose Or Remove Screen Recording Code World News 0
O Grievance Redressal App for Medical Device Other Medical Device Regulations World-Wide 1
B Selling with a Medical Device App EU Medical Device Regulations 4
S IMDS helper app or program or paid service at OEM? RoHS, REACH, ELV, IMDS and Restricted Substances 0
Similar threads


















































Top Bottom