Search results

My understanding was that it’s all consent based and not strictly black and white. In your example Company A has decided it wants to keep copies for audit purposes and if you consent then it’s fine. Company B has decided for its audit policy its good enough to simply have a record of what was seen.