Article 9 2.

Personal data accessible on ESAP shall be used and re-used in accordance with Regulation (EU) 2016/679. Any personal data that is re-used shall not be retained for longer than necessary and in any event for no longer than five years, unless otherwise provided in Union legislative acts under Article 1(1), point (a), of this Regulation.