Which of the following best describes the policy/and or procedure that ensures records are kept in a database for a period of time and not deleted?

Question

Options

• AData classification policy
• BStandard operating procedure
• CData retention policy
• DGlobal regulation

• A
  5% (2)
• B
  2% (1)
• C
  86% (38)
• D
  7% (3)

Explanation

Data retention policy (C) directly governs how long records must be kept in a database before they can be deleted or archived - it defines the rules around preserving data for compliance, legal, or operational purposes.

• A (Data classification policy) is about categorizing data by sensitivity or type (e.g., public, confidential, restricted) - not about how long to keep it.
• B (Standard operating procedure) is a step-by-step guide for performing a task; it describes how to do something, not a governance rule about data lifecycle.
• D (Global regulation) refers to laws like GDPR or HIPAA that drive retention requirements from outside the organization - a data retention policy is the internal document that implements those requirements.

Memory tip: Think "retention = keeping." A data retention policy is your organization's promise to retain (hold onto) data for a defined period - just like a job retention program keeps employees around.

No community discussion yet for this question.