Skip to main content
All glossary terms

Privacy & data

Data Retention Policy

A data retention policy states how an organization decides to keep, archive, or dispose of information. It connects information types and purposes with responsible owners, retention criteria, and the process used to apply those decisions.

Also known as retention policy.

Why it matters in practice

Retention decisions may involve business need, legal duties, security, and operational constraints. A policy is effective only when systems and teams can carry out its rules, including copies and backups where relevant. The appropriate duration is context-specific; a generic schedule cannot determine a lawful or necessary period for every dataset.

Example

A records owner maps an inactive support export to a documented retention rule and verifies that the storage workflow removes it when the rule applies.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.