What is Data retention and disposal?
In short
A data retention policy sets how long each type of record is kept, based on legal, regulatory and business needs, and how it is securely destroyed when that period ends.
Key takeaways
- A legal hold suspends disposal of records relevant to litigation or an investigation.
- Secure disposal methods include shredding, degaussing and cryptographic erasure.
- Privacy laws require personal data not to be kept longer than needed.
Where it's tested
ISC: Data Management & Governance — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A data retention policy primarily addresses the risk that: