Pruning, GDPR & Regulatory Alignment

A participant prunes with 90-day retention. A contract created two years ago is still active. What happens to it at the next run?

• It is removed, because it is older than 90 days
• It stays, because pruning never removes active contracts
• It is archived automatically, then removed

A firm keeps a copy of a closed customer's file because a law requires it for five years. Under GDPR, which provision covers keeping it after an erasure request?

• Art. 12(3), the one-month response clock
• Art. 17(3)(b), processing needed to comply with a legal obligation under EU or member-state law
• Art. 26, joint controllers