It’s all too easy to create a survey, collect responses, produce reports, and then move on to the next survey. But under the General Data Protection Regulation (GDPR), there’s a spotlight on how long personal data can be kept for.
GDPR and personal data
The GDPR mandates that data should be deleted or anonymized once it is no longer needed for the purpose for which it was collected. This means that when you complete a research project, you should assess how long you need to keep the personal data relating to it, and anonymize or delete that data at the end of that period.
GDPR compliant data retention considerations
To help you comply with the GDPR rules when you are undertaking a survey project, we’ve outlined these data retention considerations: