Guidelines 2/2020 on articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies

Paragraph 2.3.3  Storage limitation principle

21. Parties must ensure that the international agreement contains a data retention clause. This clause should specify in particular that personal data shall not be retained indefinitely but shall be kept in a form which permits identification of data subjects only for the time necessary for the purpose for which it was transferred and subsequently processed. Where feasible, for example when a maximum retention period is not already set in national legislation, a maximum retention period should be set in the text of the agreement.