Disable or delete AD user object?

[he_jac]

What is recomended or best practise when an employee leaves the buisness, disable the account and keep it "for ever" or delete it after a periode?

Is there any reason you would want to store a User AD object? 

Or is it a good reason for why you should delete it?

Also do GDPR or the privacy law enforce anything regarding this and the employees sensitive information regarding this user object? 

Is there any difference regarding this on AD on-prem and Azure AD?

Thank you!

[#2]

@he_jac Here's a general "best practice" to get started https://docs.microsoft.com/sv-se/microsoft-365/admin/add-users/remove-former-employee?view=o365-worl...

GDPR https://info.microsoft.com/ww-landing-M365EGDPR-accelerate-your-GDPR-compliance-whitepaper.html?LCID...

You should get familiar with Microsoft Trust Center as well.

https://servicetrust.microsoft.com/

It needs to be addressed within your own organization so it's difficult to say "do this and do that".