GDPR (General Data Protection Regulation) says that personal data should not be kept longer than needed, unless there are legal reasons to keep it. As an EMD Agent registered with the FCA (Financial Conduct Authority), Stream must follow the Money Laundering Regulations [Money Laundering and Terrorist Financing (Amendment) Regulations 2019 (MLR 2019)]. This means we must keep records of personal and transaction data for 5 years after our relationship with a client (your employer) ends.