The Fifth Principle
"Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes"
To comply with the fifth principle, data controllers should adopt a systematic review policy for personal data and delete information if it is no longer required.
Information does not have to be deleted once a relationship ends if they are necessary for further purposes, e.g. an employment record.
Regard should be had to statute and any specific provisions relating to the retention of data of a particular type, e.g. contracts, accounting records etc.
Only in exceptional and justifiable circumstances should data be held indefinitely. There should be a system in place for removal of different categories of data from systems when, for example, only a limited record needs to be retained.
![]()
Material on the Data Protection Supervisor's site is independent of that hosted by the Isle of Man Government and is protected by copyright. The copyright owner is the Isle of Man Data Protection Supervisor. You may not make alterations or additions to the material on this site, or sell it or misappropriate it. Material may be downloaded or copied for personal use. However, appropriate acknowledgement of the copyright owner is required if material is re-published in any format.

