B6. Data Retention Plan Per-data-category specification of retention periods, justifications, storage tiers and cost implications, and deletion or anonymisation procedures. Reconciles the AI Act’s ten-year documentation retention with GDPR’s storage limitation principle. Categories covered: training data, validation data, test data, inference inputs, inference outputs, and operator interaction logs. Responsible party: DPO Liaison reviews against GDPR. AI Governance Lead ensures infrastructure planning and budgeting. Regulations addressed: Article 18 (ten-year retention); GDPR Article 5(1)(e) (storage limitation); GDPR Article 17 (right to erasure). Key outputs

• Per-category retention schedule with regulatory justification
• GDPR-AI Act reconciliation analysis