How long should you keep personal data?

For quality records the instinct is "the longer the safer", and for personal data that instinct inverts: personal data kept longer than needed is not reassurance, it is liability. Two rules collide in the same record — the quality side wants retention for traceability, the personal-data side wants deletion once the purpose ends. The way through is to set the period per record TYPE and to write a justification against each one; a period with no stated reason cannot be defended on the day it is questioned. SenSight QMS keeps retention periods and how deletion requests are handled on one screen.