How to customise the section of a privacy notice about retention 4. Retention of personal data You must tell data subjects how long you will hold personal data about them or the criteria you use to determine how long you keep it. We recommend that you do so by providing a link in your privacy notice to your retention schedule for this data. Before doing so you will need to identify your local retention schedule and review the retention period for this data. If necessary, arrange for the schedule to be updated and published on your department’s website. If you don’t have a local retention schedule or your local retention schedule does not include a retention period for this data you will need to create one using the guidance on creating a retention schedule.