...parties can fall back on the DPA as GDPR will grant similar rights to organisations to store an individual’s data but not to process it any further.
In other words, "none at all", per the Fifith Principle?
https://ico.org.uk/for-organisations/guide-to-data-protection/principle-5-retention/
Biting the hand that feeds IT
