Regarding this directive - as a CRO - what would be the responsibility for retention of trial data and supporting information beyond study lock?

What data to retain?
How long for?
What format must the data be in? (bearing in mind technology-ageing issues of EDC systems that may be decommissioned within the retention period)