{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"Data Retention Schedule","description":"Internal register documenting how long each category of personal data is kept, why, and how it is deleted at end of retention. Supports the storage-limitation principle (Art. 5(1)(e)) and is the evidence base for answers to Art. 13(2)(a) retention-period disclosures.","type":"object","required":["controller","version","effective_date","entries"],"additionalProperties":false,"properties":{"controller":{"type":"object","required":["name"],"additionalProperties":false,"properties":{"name":{"type":"string"},"dpo_email":{"type":"string","format":"email"}}},"version":{"type":"string"},"effective_date":{"type":"string","format":"date"},"next_review":{"type":"string","format":"date"},"entries":{"type":"array","minItems":1,"items":{"type":"object","required":["data_category","purpose","retention_period","deletion_method","owner"],"additionalProperties":false,"properties":{"data_category":{"type":"string"},"purpose":{"type":"string"},"legal_basis":{"type":"string","enum":["consent","contract","legal_obligation","vital_interests","public_task","legitimate_interests"]},"retention_period":{"type":"string"},"retention_criterion":{"type":"string","description":"How the clock is measured (e.g. 'from end of contract', 'from last interaction')."},"legal_source":{"type":"string","description":"Statute or professional rule that sets the period, when applicable (e.g. 'BE Code of Commercial Law — 7 years')."},"deletion_method":{"type":"string","description":"'Hard delete', 'anonymisation', 'archive with access removed', etc."},"owner":{"type":"string"},"systems":{"type":"array","items":{"type":"string"},"description":"Systems/tables where this category lives."}}}},"review_cycle":{"type":"string"},"approved_by":{"type":"object","additionalProperties":false,"properties":{"name":{"type":"string"},"title":{"type":"string"},"date":{"type":"string","format":"date"}}}}}