Regulation 32 Establishment of time limits for erasure and review
A UK competent authority must—
(a)
establish time limits for the periodic review of the need for continued storage of personal data and for its erasure; and
(b)
ensure that those time limits are observed.