Property & Compliance Management

Use GDPR retention and deletion controls

Review retention policies, due records, legal holds, dry runs, execution and anonymisation audit results.

Reviewed 27 October 2026Merged module 2.1.3
Where to goCompliance → Agency Governance → GDPR Retention / Deletion Controls

Before you start

Compliance View opens the workspace; Create is used for new intake, Edit for review/approval and Delete for deletion. Each action also validates its record.

Follow these steps

  1. Go to the GDPR retention workspace.
  2. Check dashboard counts, due summaries and active policies.
  3. Backfill missing retention metadata if required.
  4. Run a dry run before any execution.
  5. Apply legal holds or execute an approved policy and review the audit log.

Fields, rules and limits

  • A dry run previews eligible actions. Legal holds exclude covered records; executing retention can anonymise or delete data according to its policy. Review the selected record types and current dry-run output before execution.

Check it worked

The linked entity, saved state, dates and evidence match the intended task.

If something does not look right

If the expected result is missing, check the saved record, the current workspace and the action’s permissions. Record the exact validation message; do not repeat a state-changing action until you know whether the first attempt saved.

Questions and answers

Does a parsed document count as approved?

No. Parsing supplies suggested values. A reviewer must verify the linked entity, evidence and required fields, then use the separate approval action.

Is the generated PDF the original certificate?

No. The system PDF reflects the saved compliance record or notification. Open the original source evidence separately when checking the document supplied.