How long is information kept by the IAP Service Provider?
The IAP Service Provider is required to hold all the data collected for one year from the date on which it was received, and to destroy the data at the expiration of that year. However, where the data forms the basis of a Non-Compliance Report (NCR) the data will be kept for four years to allow for its use in compliance.
