AtlacareAtlacare knows the record-retention rules for your country and applies them for you. You don't configure the periods by hand — they follow the country set on your organisation.
Where to see your retention settings
Go to Settings → GDPR & Consent. The Data retention & authority card shows, for your country:
- Clinical records — the minimum years clinical data (notes, treatment plans, measurements) must be kept, measured from a patient's last treatment.
- Financial records — the minimum years invoices and payments must be kept.
- Digital consent age — the age at which a person can give consent themselves.
- Your supervisory authority — for example, the ICO in the United Kingdom.
The periods are country-specific
Atlacare ships retention rules for 16 UK and EU countries. The differences are real and matter — for example, clinical records must be kept 8 years from last treatment in the UK (per the NHS Records Management Code and CSP guidance), 10 years in Germany, 20 years in France and the Netherlands, and 30 years in Belgium. If your country has no specific rule configured, Atlacare applies a conservative GDPR baseline.
How retention affects erasure
Retention isn't just information — Atlacare enforces it. A patient's clinical records cannot be erased until their retention period has passed, calculated automatically from their last treatment date. This protects you from deleting records you're legally required to keep, even in response to an erasure request. See How do I handle a right-to-erasure request? for how that plays out.
Retention rules are a legal minimum, not advice for your specific situation. If you're unsure, check with your professional body or your supervisory authority. Questions about the feature itself? Use the Help button.