Retention Schedule
What is Retention Schedule?
A documented timetable specifying how long different categories of personal data should be retained before secure disposal or anonymization.
Terms that appear alongside retention schedule
Each of these is named in at least one of the same controls as retention schedule. The number is how many controls name both.
- consent 5 shared controls
- lawful basis 4 shared controls
- data minimisation 4 shared controls
- gdpr 4 shared controls
- anonymisation 3 shared controls
- compliance 3 shared controls
- audit 3 shared controls
- data subject 3 shared controls
Frameworks that govern retention schedule
What the standards actually require on retention schedule
Requirements naming retention schedule across 6 standards, quoted from the control text.
Standard 5 per Section 23 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be kept for no longer than is necessary for the purposes for which they are processed.
JM-DPA2020-Standard5-Retention-Sec23-Time-Limit-No-Longer-Than-Necessary-Erasure-Deletion-Anonymisation · Jamaica DPA 2020 Standard 5 - Retention + Section 23 + Time Limit + No Longer Than Necessary + Erasure + Deletion + Anonymisation + Retention Schedule + Legal Hold + Backup Considerations + Storage Limitation →The organization must not retain personal data longer than the purposes for which it is processed require, developing and maintaining retention schedules that take account of legal, regulatory and business requirements and, where those requirements conflict, t...
iso-27701-2019::7.4.7 · Retention →Schedule 1, 4.5.3: information no longer required must be destroyed, erased or made anonymous; guidelines and procedures governing destruction are required.
PIPEDA-4.5.3 · Secure Destruction and Retention →Develop a publicly available written policy establishing a retention schedule and destruction guidelines for biometric identifiers and information, in line with Section 15(a).
BIPA-SEC15A-POLICY · Written Retention and Destruction Policy →Although the PPL does not impose a single retention period, the use-limitation principle (s.2 and s.8(b)) requires that information be kept only as long as necessary for the registered purpose.
PPL-DSR-RETAIN · Data Retention and Disposal →Data retention, archiving and purging are managed in accordance with a defined retention schedule for sensitive data.
CDMC-KC11 · Data Retention, Archiving and Purging →Questions people ask about retention schedule
What is Retention Schedule?
Why is Retention Schedule important for compliance?
Which compliance frameworks address Retention Schedule?
Where can I learn more about Retention Schedule?
See how Retention Schedule applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.