How long should you keep data for?
Now that GDPR is in force, we are regularly being asked how long data should be retained for.
The answer under GDPR is ‘no longer than is necessary’, but you should also consider how long you remain liable for your advice or service.
If your business received a claim for professional negligence, you may need to show written records supporting your advice, as part of your defence.
There are a range of time limits for professional negligence claims and you should check for guidance with your professional body, as well as taking legal advice, to understand the length of time that data should be kept, in the context of the work involved.
You can find out more information on the GDPR principle relating to data retention here: