{
  "url": "https://openlegislation.uk/draft-data-retention-regulations-2014/regulation-7",
  "json_url": "https://openlegislation.uk/draft-data-retention-regulations-2014/regulation-7.json",
  "legislation": "ukdsi/2014/9780111118894",
  "legislation_title": "The Data Retention Regulations 2014",
  "legislation_url": "https://openlegislation.uk/draft-data-retention-regulations-2014",
  "path": "regulation/7",
  "kind": "regulation",
  "number": "7",
  "heading": "Data integrity and security",
  "text": "(1) A public telecommunications operator who retains communications data by virtue of section 1 of the Act must—\n(a) secure that the data is of the same integrity and subject to at least the same security and protection as the data on any system from which it is derived,\n(b) secure, by appropriate technical and organisational measures, that the data can be accessed only by specially authorised personnel, and\n(c) protect, by appropriate technical and organisational measures, the data against accidental or unlawful destruction, accidental loss or alteration, or unauthorised or unlawful retention, processing, access or disclosure.\n(2) A public telecommunications operator who retains communications data by virtue of section 1 of the Act must destroy the data if the retention of the data ceases to be authorised by virtue of that section and is not otherwise authorised by law.\n(3) The requirement in paragraph (2) to destroy the data is a requirement to delete the data in such a way as to make access to the data impossible.\n(4) It is sufficient for the operator to make arrangements for the deletion of the data to take place at such monthly or shorter intervals as appear to the operator to be practicable.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/ukdsi/2014/9780111118894/regulation/7",
    "retrieved_at": "2026-10-30T15:12:21.160280+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}