The Fifth Principle

There are two key elements to the fifth principle. First, there is the need to determine

how long personal data is necessary for the purpose or purposes for which it is held by

the organisation including its obligations to external bodies such as the Inland

Revenue, HM Revenue & Customs and so on. Second, there is the obligation to delete

or destroy personal data once it is no longer necessary for those purposes.