Free Online GDPR Data Retention Calculator

About the GDPR Data Retention Calculator

A retention schedule answers a simple but surprisingly difficult question: when should a particular category of personal data be deleted? This tool turns that question into a dated plan. For every category you add, it combines the collection date with a retention period expressed in months or years, then produces a deletion date and a review date that falls a chosen number of days earlier. The review date is often the more useful of the two because it creates a decision point while the record still exists. At that point you can confirm whether the original purpose still applies, whether a legal hold or complaint changes the picture, and whether the data can be deleted on schedule.

The table flags overdue categories in red and categories due soon in amber. Days remaining are measured against the "as of" date you choose, so you can check a future audit date as easily as today. The whole schedule is calculated locally in your browser and can be copied as CSV for a spreadsheet, a data map, or a record of processing activities. Nothing is uploaded, which makes the tool practical for sample or anonymised data, but you should still avoid pasting unnecessary personal information into any web page.

How the dates are calculated

• Deletion date: the collection date plus the retention period in calendar months. A period of two years is treated as twenty-four months.
• Review date: the deletion date minus the review lead time, which defaults to thirty days.
• Days remaining: whole calendar days between the "as of" date and the deletion date. Negative values mean the deadline has passed.
• Status: Overdue when the deletion date is before the reference date, Due soon within thirty days, and On track otherwise.

Building a defensible schedule

Start from your actual processing activities rather than from a generic list. Group records by purpose and by system: account data, order history, support conversations, marketing consent records, job applications, CCTV footage, or whatever your organisation actually holds. For each group, write down the reason the data exists and the shortest period that still serves that reason. Statutory rules may set a minimum, such as tax or employment record keeping, while other categories should be kept only as long as needed. Record the source of each period so a reviewer can see why the number was chosen. A schedule that cannot explain its own numbers is difficult to defend.

Review dates should lead to action, not just a reminder. Decide who owns each category, what evidence they must check, and what happens when deletion is blocked by a legal hold. Keep a short audit note when a category is deleted, extended, or anonymised. If the retention period changes, update the schedule and keep the previous version. This tool does not connect to your systems, does not delete anything, and does not verify that a period is lawful. It only performs the arithmetic and presents the deadlines clearly, so use it as a working aid alongside your policies and professional advice.

Frequently asked questions