Register
Data Retention Schedule
This register defines the mandatory retention periods for each category of organizational data and records. It implements the Records Retention and Destruction Standard and supports the organization's compliance with applicable privacy laws (GDPR, PIPEDA, Quebec Law 25, UK GDPR, LGPD, PIPL), regulatory requirements, and contractual obligations.
- Type
- Register
- Version
- 1.1.2
- Date
- 2026-10-27
- Owner
- Data Protection Officer
- Approving authority
- Chief Information Officer
- Classification
- Public
- Confidentiality
- Public
- Category
- Governance
- Review frequency
- Annual and upon material regulatory or operational change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Principles
- Data retention schedule
- Legal holds
- Destruction
- Framework alignment
Frameworks it maps to
Related documents
- Records Retention and Destruction Standardgovernance
- Enterprise Governance and Risk Management Policyrisk
- Privacy and Data Governance Policyprivacy
- Legal and Regulatory Compliance Policycompliance
- Delegation-of-Authority Standardgovernance
Next
All Documents