It should be possible to set a data retention policy for any data relating to a survey response. For example, 'delete survey response 2 years after it was received'. This would allow users to properly apply any privacy policies that their surveys may be in scope of.

A better option would be to allow retention policy to be conditional on the response to a particular question. For example, is a survey contains optional questions which allow the respondent to provide personal data, it might be necessary to apply a different policy to this response versus a response where no personal data was provided by the respondent.

Another useful option would be for a user to specify for certain elements of the survey response to be anonymised instead of just deleting the whole survey. This may allow for data to be kept longer than it would otherwise been possible to.