Dates you enter

Dates are entered as YYYY-MM-DD. A date Graften can't read is refused with a message naming the field; it is never dropped, stored as a blank, or replaced with a default while the rest of the form saves.

Dates that record something that happened

These can't be in the future (a day's allowance is made for time zones):

• the date a backup restore was tested (BCDR);
• a privacy breach's incident and discovery dates — discovery can't be before the incident.

Date ranges

A contract's end date can't be before its start date.

Optional dates

Evidence expiry, campaign due dates, asset dates, announcement expiry and policy review dates can be left blank. If you fill one in, it must be a real date.