Retention period of personal data in the EU Customs Data Hub
Article 45
1. Personal data in the EU Customs Data Hub may not be stored for longer than is necessary for its processing, and in any event may not be stored for longer than 10 years from the date on which they are recorded in the EU Customs Data Hub. In the cases provided for in Article 68 and in relation to investigations launched by OLAF, the EPPO or by Member States’ competent authorities, to infringement procedures launched by the Commission and to administrative and judicial proceedings involving personal data of the categories referred to in Article 44(2), points (a) and (b), those data may be kept for a period longer than 10 years if necessary for the purpose of those investigations, procedures or proceedings. 2. After the expiry of the period provided for in paragraph 1, personal data shall be erased or anonymised, as appropriate taking into account the circumstances. 3. The controller or joint controller of the relevant data processing operation shall carry out periodic reviews of the data stored in the EU Customs Data Hub to ensure that personal data is not retained longer than necessary.