Personal Data Protection Act 2010 s 10
(1) The personal data processed for any purpose shall not be kept longer than is necessary for the fulfilment of that purpose. (2) It shall be the duty of a data user to take all reasonable steps to ensure that all personal data is destroyed or permanently deleted if it is no longer required for the purpose for which it was to be processed.
Prinsip Penyimpanan
(1) Data peribadi yang diproses bagi apa-apa maksud tidak boleh disimpan lebih lama daripada yang diperlukan bagi memenuhi maksud itu. (2) Menjadi kewajipan seorang pengguna data untuk mengambil segala langkah yang munasabah untuk memastikan bahawa segala data peribadi dimusnahkan atau dipadamkan secara kekal jika data peribadi itu tidak lagi dikehendaki bagi maksud yang baginya data peribadi itu hendak diproses.
Source: Laws of Malaysia, Attorney General's Chambers of Malaysia (lom.agc.gov.my). Not a copy of the Gazette printed by the Government Printer (Interpretation Acts 1948 and 1967, s 61).