The JEDEC requirement is 1 year for an unpowered consumer drive as you say. However, the period the drive is able to retain data decreases with the amount of write cycles it has sustained. The JEDEC requirement has to be satisfied after the disk has sustained the rated number of writes, so the retention period is likely higher than 1 year for a fresh drive. Having said that, wear mechanisms are complicated and temperature plays a major role: The hotter it is when you write the data, the longer it will last. On the other hand, the hotter it is AFTER you wrote the data, the sooner it will perish. At any rate, the 1 y guarantee depends on the drives ability to apply error correction algorithms, the first bits are lost much sooner. There's also differences in how drives handle it when they cannot fully recover the data - do they return an error, or do they just return the best guess and increase some counters? Another complication: It is not enough to just power on the drive for a second... the 'powered' part depends on the drive running background routines that scan for aged areas and refreshes them. The algorithms for this are not documented. Since reading itself wears the data (see "read disturb" effect) and at any rate spends power (especially relevant in laptops) and also takes time for a full drive scan, it is hard to know when you can be sure.
Personally, I have the drives in my main machine so they are often powered. But in addition, I backup, completely reformat (SATA security erase or the NVMe equivalent) the drive every 2-3 years and copy all the data back. I still have an almost 12 years old 840 EVO chugging along without problems. It was the first SSD to highlight the problem with retention due to it being a TLC architecture but without V-NAND, meaning data retention is especially low... in fact slowdowns in accessing old data can be seen in less than a year, due to the error correction algorithms working hard to interpret the data.