Storage limitation is one of the 7 key principles that underlie UK data protection law and which guide compliance with it. The storage limitation principle requires that personal data be stored only for as long as is necessary for it to be used for the purposes for which it was collected. Once the data’s purpose has been fulfilled and there is no other legitimate justification for storing the data, it should no longer be stored (ie it should be securely deleted or anonymised).
This aims to minimise the risks posed to individuals by the processing of their personal data (and, in turn, the legal risks and administrative hassles posed to the organisation). For example, it reduces the risk of the data being subject to data breaches or being incorrectly or accidentally used.
For more information, read Data protection principles and Data retention and document destruction.