- Select the retention start date
Use the date defined by your policy, such as collection, contract end, account closure, or another documented trigger.
- Enter the approved retention period
Convert the policy period to whole days before entering it here.
- Add any documented extension
Enter additional days only when a valid hold or approved extension applies.
- Review the base and final deadlines
The base date excludes the extension; the final date includes it.
- Record the rule outside the calculator
Keep the legal basis, business purpose, record category, owner, and review decision in your retention schedule or governance system.
GDPR Compliance Retention Deadline Planner
This planner calculates an internal deletion or review deadline from a retention start date, a chosen retention period in days, and any documented extension such as a legal hold. It is intended to make a retention schedule operational once the organization has already determined the appropriate retention rule for the record or data category.
The GDPR storage-limitation principle does not impose one universal retention period for all personal data. Retention should be tied to purpose, legal obligations, claims needs, and documented policy. Use this tool to calculate dates consistently, but determine the lawful retention period separately and review whether a hold, statutory requirement, or renewed purpose changes the planned deadline.
Plan a GDPR retention deadline
days
days
Result
—
Planned retention deadline
Base deadline—
Deadline after extension—
Total retained days—
Days from today (browser date)—
Formula:
Base deadline = Start date + Retention days; Final deadline = Base deadline + Extension daysWhere:
- Start date: the policy-defined event that begins the retention clock
- Retention days: approved base retention duration
- Extension days: additional period for a valid hold or other documented reason
Assumptions: This planner performs calendar-date arithmetic only. It does not choose a legally required retention period, and special rules may apply to specific records, jurisdictions, investigations, or claims.
What the result means
The result is the internal deadline generated from the dates and periods you entered.
Confirm the retention rule and any legal hold with the appropriate privacy, records, or legal owner before deletion.
Given:
- Retention start date: August 7, 2026
- Base retention period: 365 days
- Additional hold: 30 days
Calculation:
Base deadline = August 7, 2026 + 365 days = August 7, 2027. Final deadline = August 7, 2027 + 30 days = September 6, 2027.
Result: Planned final deadline: September 6, 2027.
Interpretation: The extension moves the operational deadline by 30 days; it does not itself establish that the extension is legally justified.
Does GDPR require deleting all personal data after a fixed number of years?
No. The GDPR requires that personal data not be kept longer than necessary for the purposes for which it is processed, subject to applicable legal and operational considerations. Organizations typically document category-specific retention rules.
What date should start the retention clock?
Use the trigger specified in the approved retention rule, such as transaction completion, employment end, account closure, or collection date. Different record categories can use different triggers.
How should a legal hold be handled?
A valid legal hold can suspend or extend normal disposition. Document the hold scope and release process, and only add extension days here when they reflect the approved instruction.
Does the calculator account for months of different lengths?
The input is expressed in days, so it adds exact calendar days. If your policy is written in months or years, convert it consistently according to your organization’s rule before entering the duration.
What should happen when the deadline arrives?
Follow the approved disposition process, which may involve deletion, anonymization, archival under a separate lawful basis, or a documented review if another obligation requires continued retention.