The 2020 document from the Information Governance Observatory gathers approaches and best practices regarding data deletion and retention, particularly in light of the GDPR. It explores topics such as data mapping, regulatory requirements, organizational models, and techniques for pseudonymization and anonymization. An analysis of the responsibilities of control bodies and the Data Protection Officer is proposed, along with a focus on operational procedures to ensure security and compliance in handling personal data.