A data retention policy is designed to ensure compliance with what?

• A. Marketing goals
• B. Internal branding
• C. Employee performance reviews
• D. Legal and regulatory requirements

Answer: (D)

A data retention policy focuses on keeping and disposing of information in a way that aligns with legal and regulatory requirements. It sets rules for what data must be retained, for how long, where it’s stored, how it’s protected, and how it should be securely disposed of when the retention period ends. This helps organizations meet laws and standards, support audits, and demonstrate accountability in case of investigations or disputes.

Marketing goals, internal branding, and employee performance reviews are internal objectives that don’t establish the legal timelines or protections that retention laws require, so they aren’t the primary driver behind a data retention policy.