5.4 Anti-Doping Organizations  shall ensure that Personal Information  obtained in the TUE  process is retained for a peri od of eight (8) years, and th ereafter only for as long as necessary to fulfill their obligations under the Code  or where otherwise required by applicable law, regulation or  compulsory legal process.