You must have standard processes in place for the end of a project, that follow all legal requirements and data security best practice.