 |
 |
The Data Protection Act does not specify minimum or maximum periods for retaining personal data; it simply states that "Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes." I am looking to draw up a "Database management policy" and would be interested to know what guidelines are observed by other educational institutions, in terms of keeping or deleting the records of former students on their library management systems. Thank you in advance for any advice or information you can offer. Regards Charlotte Stock Boston University - London