Surveillance Retention & Lawful Deletion — Quick Reference

One-page printable that turns the article into a pre-deployment reference: the floor-and-ceiling model (minimum must-keep vs maximum may-keep), a compact rules matrix (GDPR storage limitation Art. 5(1)(e); EDPB Guidelines 3/2019; right to erasure Art. 17 with the one-month Art. 12(3) deadline; BIPA 740 ILCS 14/15(a) three-year biometric cap; CCPA/CPRA 1798.105/.100; NIST SP 800-88 Clear/Purge/Destroy; legal hold and sector minimums), what 'delete' must actually reach (backups, replicas, exports)