Data Retention Policy
What is Data Retention Policy?
A documented policy defining how long different categories of data should be kept, when it should be archived, and when it must be permanently deleted.
Frameworks that govern data retention policy
What the standards actually require on data retention policy
Requirements naming data retention policy across 5 standards, quoted from the control text.
The operator must keep children's personal information no longer than is reasonably needed for the particular purposes behind its collection, delete it when no longer needed using reasonable measures against unauthorised access or use in deletion, never retain...
esrb-privacy-certified::C25-312.10 · Written data retention policy published in the online notice (312.10) →The asset owner shall define and apply retention periods for IACS data, including logs and backups, so that data is kept as long as needed and no longer.
iec-62443::DATA 1.4 · Data retention policy →The operator must retain a child's personal information only as long as reasonably necessary for the specific purposes for which it was collected, delete it when no longer needed using reasonable measures against unauthorised access or use in deletion, never r...
coppa::312.10 · § 312.10 Data retention and deletion →Procedures are developed, implemented and maintained for the secure disposal of customer information in any format no later than two years after the last date it is used in connection with providing a product or service to the customer, unless the information...
ftc-glba-safeguards-rule-16-cfr-part-314::314.4(c)(6) · 314.4(c)(6) Secure disposal and retention review →Information held in systems, devices or any other storage media is to be deleted once it is no longer needed. Purpose: avoid sensitive information being exposed unnecessarily and meet legal, regulatory and contractual deletion requirements.
iso-27002-2022::8.10 · Information deletion →Questions people ask about data retention policy
What is Data Retention Policy?
Why is Data Retention Policy important for compliance?
Which compliance frameworks address Data Retention Policy?
Where can I learn more about Data Retention Policy?
See how Data Retention Policy applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.