The fifth data protection principle is that personal data must be kept for no longer than is necessary for the purpose for which it is processed.
