We have a duty under the Data Protection Act to ensure that all personal data is accurate and kept up to date. Each team that collects personal information about people needs a process for ensuring that information is updated as often as necessary.
We must also not keep personal information for any longer than is necessary for us to use it for the purpose for which it was obtained. So again, each team that collects personal information about people also needs to have a process for weeding out old information and making sure it is destroyed in a way that protects its confidentiality.