An administrator receives a notification from legal that an investigation is being performed on members of the finance department. As a precaution, legal has advised a legal hold on all documents…

A legal hold forces the organization to retain data beyond its normal lifecycle, potentially violating Data Storage Policy by exceeding defined storage quotas, retention tiers, or deletion schedules that govern how much data may be kept.

Data Retention Policy defines how long specific data categories are kept before deletion or archival - a legal hold of unspecified duration directly overrides this schedule, placing the organization in violation of its own policy.

Corporate Confidentiality Policy governs who may access sensitive data and how it is protected, not how long it must be preserved - a legal hold does not inherently expose confidential data.

Data Breach Mitigation Policy addresses incident response when data is compromised by unauthorized access, which is unrelated to a preservation requirement issued by legal counsel.

Corporate Privacy Policy governs the collection, use, and sharing of personal information with external parties, not the internal duration of data retention mandated by a legal hold.