Due to the recent introduction of personal data protection regulations, an enterprise is required to maintain its employee data in production systems only for a limited time. Which of the following is

Asset retention policies typically refer to physical or IT assets, not specifically the data contained within them or regulatory requirements for data lifespan.

Information retention policies define the periods for which specific types of information, such as personal employee data, must be kept or deleted, aligning directly with data protection regulations regarding data lifespan. These policies ensure compliance by dictating the lifecycle of sensitive data from collection to eventual destruction or archival.

Data archival policies deal with moving inactive data to long-term storage, not necessarily the maximum allowable retention period in production systems as dictated by regulation.

Data backup and restoration policies focus on recovery in case of loss, not on the legal or regulatory mandates for how long data can be maintained in active systems.