Legal review draft
Data Retention and Rights
Proposed retention, correction, access, and deletion-request language. Exact schedules require counsel and records-owner approval.
Draft version: 2026-07-13-records-draft. Effective date to be assigned only after approval.
Retention by record class
Records are classified before production release. Clinical/application evidence, signed authorizations, legal acceptances, payment history, security audit evidence, communication consent, operational logs, and transient quarantined uploads have separate schedules. The approved schedule will identify the legal basis, minimum period, owner, storage class, and deletion method for each class.
Immutable history and correction
Some evidence must remain append-only to preserve accountability. A correction, revocation, reversal, or superseding version is recorded without silently rewriting the original event. Access is restricted to the minimum role and assigned staff where applicable.
Access, correction, restriction, and deletion requests
After identity verification, a person may request access, correction, restriction, or deletion review. A request may be limited where retention is required by law, needed to document an authorized transaction, or necessary for security and legal claims. The response will explain any limitation and available appeal or complaint route.
Secure disposal and legal hold
Expired data is removed through auditable jobs appropriate to the storage medium. A documented legal hold pauses disposal for affected records. Backups expire through their protected lifecycle rather than ad hoc deletion.
Questions and requests
Call 773-896-0420 or email contact@peaceofmindmmj.com. Do not include medical details in ordinary email.
