When a subject rights request is received information must be collected to respond to the request. To maintain an auditable log of received requests and the responses they received, much of that information is retained indefinitely. Collected information that may fall into the category of personal information however is subject to the following retention limits:
| Information Collected | Retention Limit |
| Requester Email | 270 Days |
| Requester First Name | 270 Days |
| Requester Last Name | 270 Days |
| Requester Country of Residence | 270 Days |
| Requester State/Province/Territory | 270 Days |
| Requester Proof of Identity/Other Attachments | 270 Days |
| Requester Secure Messaging Portal Attachments | 270 Days |
| Subject Rights Manager Secure Messaging Portal Attachments | 270 Days |
| Subject Rights Manager Request Attachments | 270 Days |
| Subject Rights Manager Attachments on Action Items | 270 Days |
| Subject Rights Assignee Attachments on Action Items | 270 Days |
| Automated Data Store Summary Files on Action Items | 270 Days |
| Automated Data Store Deletion Files on Action Items | 270 Days |