Data Retention Policy Template

Author(s): Celine Gravelines

To unlock the full content, please fill out our simple form and receive instant access.

Use this template to set the foundational requirements of data retention within the organization. Outline the following requirements:

The organization will employ the principle of data minimization.
Data will be stored for the shortest possible time, accounting for legal obligations for extended retention.
At the end of retention, data may be deleted or sufficiently anonymized.
Data must be kept accurate and up-to-date.
A data retention schedule will document what data is stored and the duration of retention.

This policy contains GDPR-specific language, making it easy to use if it is applicable to your organization.

View the Complete Blueprint:

A quick reference guide for retention, privacy, cookies, and the data protection officer role.

Don’t panic – prepare today’s pandemic response plan to accommodate tomorrow’s privacy implications.

Treat the data risks that will derail your retention schedule

Take out data privacy’s grey areas with a quantitative approach to your program.

You’ve mastered the basics, but there are additional risk, data, and measurement tasks to complete.

Browse all Security