Which of the following helps define data retention time is a stream-fed data lake that includes personal data?

Question

Options

• AInformation security assessments
• BPrivacy impact assessments (PIAs)
• CData privacy standards
• DData lake configuration

• A
  11% (4)
• B
  82% (31)
• C
  3% (1)
• D
  5% (2)

Explanation

Privacy Impact Assessments (PIAs) are the correct tool here because they are specifically designed to evaluate how personal data is collected, processed, stored, and - critically - how long it is retained. A PIA formally documents data flows and legally required retention limits, making it the governance mechanism that defines retention timelines in systems like stream-fed data lakes handling personal data.

• A (Information security assessments) focus on threats, vulnerabilities, and controls - they protect data but don't define how long it should be kept.
• C (Data privacy standards) are general frameworks (like ISO 27701) that provide guidelines on handling personal data, but they don't produce the specific retention decisions for a given system.
• D (Data lake configuration) is where retention rules are implemented, not defined - configuration enforces policy, it doesn't create it.

Memory tip: Think "PIA = Personal data's life plan." Whenever a system touches personal data, a PIA maps the entire data lifecycle including birth (collection), life (processing), and death (retention end/deletion). If a question involves personal data + retention, PIA is almost always the answer.

No community discussion yet for this question.