Does your non-profit keep personal information beyond what is required by law?
Different types of personal information must be kept for different amounts of time. For example, financial records must be kept for 7 years and official society records for 10 years.