Still holding onto old client records “just in case”?

If you’ve got a folder of client details from years back that you keep meaning to sort out, it’s worth knowing where you actually stand under GDPR.

There’s no fixed “delete after X years” rule for most personal data. Instead you’re required to only keep it for as long as you genuinely need it, something called the storage limitation principle. Some things do have legal minimums, tax records generally need keeping for 5 to 6 years, for example. Outside of that, if you don’t have a real reason to still hold onto it, it should go.

It’s not just about staying compliant either. Less old data sitting around means less risk if a complaint or a data request ever lands on your desk.

Worth an afternoon of digital decluttering.