Skilirium

Recognises retention longer than the purpose

S-404 · Skill knobit · Activity: Record processing activities and assess privacy impact · Competence: Data security · Also needed in Data integration and interoperability, Document and content management

A period beyond purpose or legal retention.

Can AI do this?

AI does this well Most of the tested AI models master this. 4 of 4 models in the current benchmark master it.

ModelTierProbability of masteryStatus
gemini-4-argonFlagship 100%Mastered
gemini-3.5-flash-liteLow cost 100%Mastered
gpt-6-lunaLow cost 95%Mastered
claude-haiku-5-5Low cost 96%Mastered

Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.

What it looks like in practice

Expected result: The period and the one the purpose supports

How it is assessed: Flags the deficient case and passes the acceptable one. Deficient: PA-004 marketing data kept 10 years after the last contact Acceptable: Until objection or 2 years after the last contact, per policy

Also known as: Retention longer than the purpose

Related knobits

Builds on

All 19 knobits of Record processing activities and assess privacy impact.

Source: Review checklist 04-privacy, row 4 (GDPR Art. 5(1)(e))