How long can we keep personal data?
Personal data shall not be kept longer than necessary for the purposes of the processing. When the purposes of a particular data processing are fulfilled, the main rule is therefore that the data in question should be de-identified or deleted.
The principle of storage limitation is one of the fundamental principles of the General Data Protection Regulation (GDPR).
Latest update: 12 August 2025