I'm Done With My Data, Now What? - Data Protection
The answer is simple; delete it (unless retention is required by law or contract)! Virtually every company processes personal data in some form or fashion.
United States United Kingdom General Data Protection Regulation Data Protection Act Consumer Privacy Act Deleting Personal Data
Source: mondaq.com