The simple rule is that personal data shouldn’t be kept for longer than necessary.
Rhaid peidio â chadw data personol yn hwy nag sy'n angenrheidiol