Data Privacy Hub

Retention Periods

Data retention refers to all obligations on the part of controllers to retain personal data for certain purposes.

To limit how long you keep personal data is part of data minimization. The rule of thumb is "as long as necessary, as short as possible", although sometimes legal rules may impose fixed periods. Data that are no longer retained cannot fall into the wrong hands, nor be abused, meaning that defining and enforcing limited conservation periods helps to protect the people whose data are processed.

Source