Data Protection Act 1998

5 U.K. Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.