ABSTRACT
There are two key elements to the fifth principle. First, there is the need to determine
how long personal data is necessary for the purpose or purposes for which it is held by
the organisation including its obligations to external bodies such as the Inland
Revenue, HM Revenue & Customs and so on. Second, there is the obligation to delete
or destroy personal data once it is no longer necessary for those purposes.