Which of the following is the MAIN goal of a data retention policy?

Data destruction is addressed by a data disposal or data destruction policy, not the main goal of a data retention policy which focuses on keeping data secure for a defined period.

Data recovery is the focus of backup and disaster recovery policies, not the primary goal of a data retention policy.

While integrity is relevant, availability is not the primary concern of a data retention policy - confidentiality is more critical because retained data must be protected from unauthorized disclosure during the retention period.

A data retention policy defines how long data must be stored and ensures it remains unaltered (integrity) and protected from unauthorized access (confidentiality) throughout that retention period. The policy governs the lifecycle of data, specifying timeframes and security controls that must be maintained. Confidentiality is a key concern because retained data often contains sensitive information that must be protected for legal, regulatory, or business reasons.