Which is a Data Protection Act principle about retention?

Which is a Data Protection Act principle about retention?

• A. Personal data must not be kept for longer than is necessary
• B. Personal data must be kept forever
• C. Personal data must be published openly
• D. Personal data must be stored on cloud only

Answer: (A)

Retention focuses on how long personal data is kept. The Data Protection Act principle of storage limitation says you should not keep personal data longer than necessary for the purpose it was collected for. So the statement that data must not be kept for longer than is necessary directly reflects this rule: delete or anonymize data once it’s no longer needed, and only retain what you truly require. The other options miss the point: keeping data forever ignores the time limit; publishing data openly would violate privacy; and storing data in the cloud is a storage location issue, not about how long you keep it.

Retention focuses on how long personal data is kept. The Data Protection Act principle of storage limitation says you should not keep personal data longer than necessary for the purpose it was collected for. So the statement that data must not be kept for longer than is necessary directly reflects this rule: delete or anonymize data once it’s no longer needed, and only retain what you truly require. The other options miss the point: keeping data forever ignores the time limit; publishing data openly would violate privacy; and storing data in the cloud is a storage location issue, not about how long you keep it.