Record Retention Schedules
Record Retention Schedules
The storage limitation principle of the GDPR requires that personal data shall not be kept for longer than is necessary for the purposes for which the data was originally collected or used.
Data protection legislation allows the organisation to determine the "necessary" amount of time for retaining personal data. Current University practice is to create bespoke retention schedules that meet the needs of specific Services, Schools or Institutes.
JISC designed general records retention guidelines and classification for higher education institutions.
Secure disposal procedures, such as shredding, must be used for the destruction of documents that contain personal data.