How long can we keep personal data?

Personal data shall not be kept longer than necessary for the purposes of the processing. When the purposes of a particular data processing are fulfilled, the main rule is therefore that the data in question should be de-identified or deleted.

The principle of storage limitation is one of the fundamental principles of the General Data Protection Regulation (GDPR).

The GDPR fundamental principles