Apply retention and deletion

Security and data protection: Apply retention and deletion. Starts when: Retention date reached. Steps: Identify records due; Legal hold check; Delete or anonymise; Receipt. Done when: Deletion receipt lists record counts by category. Rules that apply: UK GDPR Art 5(1)(e); MLRs 2017 reg 40.