According to Article 5(1)(5) of the Personal Data Protection Act, personal data should only be kept for as long as the purposes of the data processing require. As to how long a former employee's personal data should be kept, this Bureau has issued some exemption authorizations, which contain provisions in this regard. Please refer to them for detail (cf. no. 1/2007 and 2/2007).