GDPR template · GDPR articles
Data Retention and Erasure Policy
Defines retention periods and erasure procedures aligned with GDPR Articles 5(1)(e) and 17. Written for your company, citing the requirements below.
- Sections
- 5
- Requirements
- 2
- Formats
- PDF, Word
- Shelf
- 10 GDPRdocuments in all
No card needed to start.
- Cites
- Art. 5(1)(e), Art. 17
- Formats
- PDF and Word
Sections
Each written around your company: your tools, your roles, your review dates.
- Purpose and Scope
- Retention Schedule
- Erasure Procedures
- Right to Erasure Requests
- Exceptions and Legal Holds
Requirement it is written to
As named in the template description.
Art. 5(1)(e), Art. 17, as named in the template description: Defines retention periods and erasure procedures aligned with GDPR Articles 5(1)(e) and 17.
Recent changes
Updates from official sources that name this policy. All policy updates
9 Oct 2026 · European Data Protection Board
Italian DPA fines IQVIA EUR 7 000 000 for unlawful processing of health dataReview the Data Retention and Erasure Policy to establish appropriate retention periods for health data.
9 Oct 2026 · European Data Protection Board
Italian DPA fines Emirates EUR 180,000 over passenger health dataReview retention periods for MEDIF data to ensure they are not excessive in relation to the purposes of assessing fitness to fly and providing assistance.
23 Sep 2026 · European Data Protection Board
Irish DPC fines Google EUR 403 million over location data processingReview the Data Retention and Erasure Policy to ensure retention periods for location data are compliant.
- GDPR6 sections
Data Breach Notification Procedure
CitesArt. 33 Art. 34PDF · WordCites GDPR Article 33, named in the template description; GDPR Article 34, named in the template description. - GDPR5 sections
Consent Management Policy
CitesArt. 6 Art. 7PDF · WordCites GDPR Article 6, named in the template description; GDPR Article 7, named in the template description. - GDPR6 sections
Data Subject Access Request Procedure
CitesArt. 15–22PDF · WordCites GDPR Article 15–22, named in the template description. - GDPR6 sections
Data Protection Policy
CitesArt. 5 Art. 6 Art. 25 +4 +5PDF · WordCites Art. 5, Principles of Processing (GDPR); Art. 6, Lawfulness of Processing (GDPR); Art. 25, Data Protection by Design and Default (GDPR), and 4 more. - GDPR5 sections
Privacy Notice
CitesArt. 12 Art. 13 Art. 15 +3 +4PDF · WordCites Art. 12, Transparent Communication (GDPR); Art. 13, Information at Collection (GDPR); Art. 15, Right of Access (GDPR), and 3 more. - GDPR5 sections
DSAR Procedure
CitesArt. 15 Art. 17 Art. 20 +4 +5PDF · WordCites Art. 15, Right of Access (GDPR); Art. 17, Right to Erasure (GDPR); Art. 20, Right to Data Portability (GDPR), and 4 more.
GDPR on its own
- Documents
- 10
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so GDPR + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.