An AI audit team is reviewing the data governance practices for an AI model used in hiring. The team discovers that training data containing demographic information was retained after model development without documented justification. Under GDPR, which principle is MOST likely violated?

B is correct because GDPR's storage limitation principle (Article 5(1)(e)) requires that personal data be kept no longer than necessary for the purposes for which it is processed. Once model training is complete and the data is no longer needed for a specific, documented purpose (e.g., model retraining, regulatory audit), retaining it without justification violates this principle. Accuracy (A) concerns data correctness, not retention duration. Integrity and confidentiality (C) is a security principle applicable regardless of how long data is retained. Lawfulness (D) concerns the legal basis for initial processing, which may have been valid at the time of collection.