Are there any limitations on how long personal data can be stored?
Yes, the DPA should specify that personal data should only be retained for as long as necessary to fulfill the purposes for which it was collected.