"I note that you have requested that all your personal data is destroyed pursuant to the Data Protection Act. Unfortunately, I am unable to comply with this request I am afraid. The Data Protection Act states that data should not be retained for longer than is necessary but this does not mean that the end of a relationship requires us to destroy such data. The retention period is driven by the purpose for which we may need the information, for example, our statutory obligations under the Money Laundering Regulations and the six year statutory limitation period."
"Subject to subsection (2) an individual is entitled at any time by notice in writing to a data controller to require the data controller at the end of such period as is reasonable in the circumstances to cease, or not to begin processing, or processing for a specified purpose or in a specified manner, any personal data in respect of which he is the data subject…"