This document provides firms with an outline Data Retention Policy, designed to meet the requirements of the General Data Protection Regulation, that can be adjusted and amended to best fit the needs and operation of the firm.