thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Data Retention Policy

Policy defining how long categories of data are kept and how they are disposed of when no longer needed.

Definition

Retention schedules balance legal and regulatory requirements, business needs, and privacy principles such as storage limitation. Data should be securely destroyed at the end of retention unless subject to a legal hold. Over-retention increases breach impact and discovery costs.

Example

Customer support tickets are retained for 3 years and then automatically deleted unless under legal hold.

Exam tip

Legal holds override normal retention and deletion schedules.

Related terms