Under the storage limitation principle under the General Data Protection Regulation (“GDPR”) (Art 5(1)(e)) it is necessary to have a clear schedule which a business follows when making decisions about data retention to ensure that personal data are not be retained longer than necessary, in relation to the purpose for which such data is processed.
This document sets out how long records will be kept for business purposes before they are considered for destruction.
All records containing identifiable personal client / patient / supervisees data at North Hertfordshire Psychology Services.
4. Data retention details