Data retention policies should also specify the maximum retention periods for sensitive or personal data. And data retention programs serve many purposes and organizations need to preserve intellectual property (IP). Moreover, data retention policy are organization’s established set of rules around holding on to information. A proper data retention process will support institutional memory, forensic investigation and e-discovery legal proceedings. In addition, data retention is an obligation resulting from regulatory and compliance requirements in an organization. It is essential for organizations to protect and preserve records as evidence of actions for different purposes.
Data retention policy may incorporate things like:
- Document the purpose of the retention policy
- Identify stakeholders who is affected by the retention policy
- Identify the types of data and electronic systems considered by the retention policy
- Define key terminologies such as legal and technical
- Describe the business requirements in detail
the_cyberguy Answered question 05/10/2022