Personal data must be deleted once it is no longer necessary or relevant for the purpose for which the terms of conservation established by law were collected or, if applicable, after the expiry of the time limits for which it was intended. Deletion must involve blocking deleted data during prescription periods in which some form of liability may be required from processing.