JISC Record Retention Schedules

 The 5th Principle of the DPA requires that personal data is only retained for as long as is necessary to fulfil the purpose for which the personal data was collected. The personal data held by the University for any one individual will vary in content, scope, and applicability. JISC have made available recommendations as to Record Retention Schedules across HEI activities. The recommendations cover:

Teaching and Research;
Student Administration and Support;
Commercial Enterprise;
External Relations;
Corporate Management;
Resources Management;

Secure disposal procedures, such as shredding or incineration, must be used for the destruction of documents that contain personal data.