Which retention period applies when a multinational company has records subject to conflicting retention laws in different countries?

When a multinational organization holds records governed by retention laws that conflict across jurisdictions, there is rarely a single “right” number that satisfies everyone automatically. The goal is to build a defensible, documented decision that honors every applicable obligation rather than guessing at one universal period.

Start by mapping the obligations

For each record type, identify every jurisdiction with a legitimate claim to govern it. A country’s law may apply because the record was created there, because it concerns local employees or customers, or because the data subjects reside there. List the minimum required retention each jurisdiction imposes and, just as important, any maximum it permits.

Conflicts come in two flavors:

• A minimum-retention conflict, where one country requires keeping a record longer than another.
• A maximum-retention conflict, where one country forbids holding personal data beyond a certain point (common under data-privacy regimes).

Reconciling the conflict

The widely used default principle is to apply the longest required retention period among the applicable jurisdictions, so that no minimum obligation is breached. Keeping a record longer than one law requires is generally permissible.

The exception is when a maximum-retention or data-minimization rule actively prohibits longer retention. Where a true contradiction exists, organizations cannot simply pick the longer period for the prohibited data. Instead they typically resolve it by:

• Segregating data so each jurisdiction’s copy follows its own rule.
• Anonymizing or pseudonymizing personal data once the shortest-required period lapses, while retaining the non-personal record content for longer obligations.
• Seeking legal counsel to weigh which obligation prevails for a specific record.

Document the reasoning

The strength of any retention decision lies in its defensibility. Record which laws were considered, why a particular period was chosen, and who approved it. Recognized records-management standards emphasize systematic, evidence-based retention scheduling for exactly this reason, and privacy frameworks reinforce the data-minimization side of the balance.

Treat this as a per-record-type analysis, not a blanket policy: payroll, tax, health, and contract records may each resolve differently. Revisit the schedule when laws change.

For broader guidance on retention scheduling and long-term stewardship, see the archives and preservation hub.