Guide 5 - Data retention
Retention of records containing personal data
To comply with the 5th Principle of the Data Protection Act 1998, personal data should not be kept for longer than is required for the purpose for which it has been acquired. In some cases that period is determined by law, but in others it is a matter of best practice, bearing in mind the 4th Principle that there is an obligation for it to be accurate and kept up to date, the 7th Principle to keep it safe and the 6th Principle, which gives the individual right of access to their own data. For further detailed advice on document retention please contact the Corporate Records Unit.