For selected purposes in a GDPR and UK-GDPR compliant privacy statement, you will need to determine the data retention period. The data retention period is specific to your selected purpose. The GDPR does not mention specific periods, but it does mention the principle of storage
Complianz Privacy Suite
Get compliant today in the European Union and/or in the United States, Canada, and United Kingdom with the only Privacy Suite that offers a fully-featured plugin for GDPR, DSGVO, PIPEDA, CCPA, COPPA and more!