The destruction of a cloud customer's data can be required by all of the following except ___________.

Statutes (laws) can legally require data destruction, such as in cases of right to be forgotten or data retention limits.

Regulations (e.g., GDPR, HIPAA) often specify requirements for data retention and destruction based on data types and purposes.

While a cloud provider's policy might dictate procedures for data destruction, it does not unilaterally *require* the destruction of a customer's data unless driven by a legal obligation, regulatory compliance, or a specific clause in the customer's contract. The provider's policy is internal and subservient to external requirements and agreements.

A contract between the customer and provider can explicitly stipulate conditions and timelines for data destruction, particularly upon termination of services.