After the purpose of processing personal data has ended, can the data continue to be stored for statistical purposes?

ANSWER

Under Article 5(1)(e) GDPR, personal data must be kept in a form permitting identification of data subjects for no longer than is necessary for the purposes for which the data are processed; personal data may be stored for longer periods insofar as the data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, provided that appropriate technical and organisational measures are implemented to safeguard the rights and freedoms of the data subject. This means that in the case described the data may continue to be processed for statistical purposes after the original processing purpose has ended, if, for example, they are anonymised, i.e. processed in such a way that they can no longer be attributed to a specific person.