<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <title>GDPR and Self Build Register</title>
  <link rel="self" href="https://khub.net/cy/c/message_boards/find_thread?p_l_id=53683759&amp;threadId=673677666" />
  <subtitle>GDPR and Self Build Register</subtitle>
  <id>https://khub.net/cy/c/message_boards/find_thread?p_l_id=53683759&amp;threadId=673677666</id>
  <updated>2026-08-03T06:25:02Z</updated>
  <dc:date>2026-08-03T06:25:02Z</dc:date>
  <entry>
    <title>GDPR and Self Build Register</title>
    <link rel="alternate" href="https://khub.net/cy/c/message_boards/find_message?p_l_id=53683759&amp;messageId=673677665" />
    <author>
      <name>Jonathan Pheasant</name>
    </author>
    <id>https://khub.net/cy/c/message_boards/find_message?p_l_id=53683759&amp;messageId=673677665</id>
    <updated>2022-06-20T10:34:26Z</updated>
    <published>2022-06-20T09:21:59Z</published>
    <summary type="html">&lt;p&gt;Just wondering how long you keep personal data about people on the
  Self Build Register? &lt;/p&gt;
&lt;p&gt;GDPR law requires that you only keep people's personal data as long
  as required. Given the Self Build Register is a planning register and
  requirements of the Regulations mean you have to grant relevant
  development permissions within 3 years, should you be holding personal
  data after that three year period?&lt;/p&gt;
&lt;p&gt;I do not think there is anything in the Regulations on what to do if
  you have not granted suitable development permissions. It simply says
  that the requirement is to grant the permissions. There is no required
  action if you do not?&lt;/p&gt;
&lt;p&gt;Given that GDPR is about removing personal data when it is no longer
  required, I suggest that once the three years have passed from the
  October they were put on the register, their personal details should
  be removed. Similarly with any records held such as application forms?
  This is because the purpose of the register is to identify need and
  action (grant PPs) within 3 years. After that there is no longer a
  need to hold the personal data? Is there?&lt;/p&gt;
&lt;p&gt;I guess that you could remove all the personal data but leave a
  record in the Register just so that you know how many people were
  registered and when?&lt;/p&gt;
&lt;p&gt;Are people doing this and if not then how long do you hold this
  personal data for?&lt;/p&gt;
&lt;p&gt;Thanks&lt;/p&gt;
&lt;p&gt;Jon&lt;/p&gt;
&lt;p&gt; &lt;/p&gt;
&lt;p&gt; &lt;/p&gt;
&lt;p&gt; &lt;/p&gt;</summary>
    <dc:creator>Jonathan Pheasant</dc:creator>
    <dc:date>2022-06-20T09:21:59Z</dc:date>
  </entry>
</feed>
