According to the UK GDPR, companies and businesses are required to keep data for a period of six years from the end of the last company financial year they relate to. It allows for longer data retention if they show a transaction that covers more than one of the company's accounting periods, especially if the company purchased equipment that's meant to last longer than 6 years. In addition, for data that has no personal data included, the default data retention period is five years, and for data with personal data, it's 2 years.