How often do I need to review and/or update my privacy policy?

Review your privacy policy regularly and whenever your data practices or applicable requirements change. An annual review is a useful baseline, but it should not delay necessary updates.

Check it when you introduce:

• New data collection, purposes, or website features.

• Analytics tools, advertising partners, or other providers.

• Different retention periods or international transfers.

• Changes to rights, contact details, or legal requirements.

GDPR does not impose a universal annual rewriting deadline. However, covered businesses must update specified CCPA privacy disclosures at least every 12 months under California Civil Code §1798.130.

Maintain a privacy policy change log, show the relevant update date, and notify users when required. Changing the date alone does not make outdated disclosures accurate.