Data Protection legislation requires we retain personal data no longer than is necessary for the purpose the information was obtained for.  Ensuring personal data is disposed of when no longer needed will reduce the risk that it will become inaccurate, out of date or irrelevant.

• We must not keep personal data for longer than we need
• Individuals have a right to erasure when we no longer need their data.
• We must periodically review the data we hold, and either erase it or anonymise it.
• We must be able to justify how long we keep personal data.

If data is being retained in perpetuity for a special lawful purpose, it must be held separately from all other data and only ever be accessed for the stated special lawful purpose.

The organisation has a separate policy addressing data protection needs.  For a fuller understanding you should also read this policy.