A practical UK guide to the storage limitation principle. It explains how to decide how long to keep each type of personal data, how to build a retention schedule, which official retention periods apply to common business records and which periods are only common practice, and how triggers, legal holds and exceptions work.
It then covers deleting properly across live systems, email, backups and paper, secure disposal of devices and media using NCSC guidance, handling erasure requests and supplier deletion, and running retention as an annual routine. Includes a retention schedule, deletion log, device disposal record, supplier deletion request and review checklist.
General educational guidance written by Data Menu. It is not legal advice.