Data protection laws expect businesses to keep personal data only as long as needed, then dispose of it safely. That applies whether the data sits in a cloud folder or a paper file in a locked cabinet ...