10. Retention and Deletion

Uploaded data in ZODIAC consists only of anonymized DICOM files and anonymized clinical metadata. Original source data and local mapping files remain with the participating institute.

Anonymized datasets are retained in accordance with the approved ZODIAC Pillar-4 project duration and applicable project governance decisions. The current planned retention period is 3 years, unless extended by formal project decision.

At the end of the approved retention period, anonymized datasets should be deleted or retained only if a formal extension or additional approved purpose exists.

Participating institutes remain responsible for their own local retention and deletion practices, including original source data, local anonymized outputs, downloaded logs, and local mapping or traceability files.