Wild idea (maybe too complex though): add a "remove data after" field to registration info fields. As the kind of data in there can differ, maybe our retention policy should also be set per case. For example, when visiting an in-house day at the ministry of defense where we ask for a pasport number, we might want to set a deletion date of the day after the event, while for other information we might want a longer period. This way, we also enforce people to think about when to delete the data (and we could have that field be max. 5 years)

Originally posted by @JobDoesburg in #1935 (comment)