What is a data retention schedule?

• A. A policy specifying how long records are kept and when they are disposed of.
• B. A schedule for software updates.
• C. A calendar of holidays.
• D. A plan for data encryption only.

Answer: (A)

A data retention schedule is a policy that specifies how long records are kept and when they are disposed of. It lays out retention periods for different data types, aligns with legal and regulatory requirements, and guides when and how information should be securely destroyed. This plan applies to both digital data and physical records, and it helps organizations manage risk and costs by avoiding keeping information longer than necessary. It also assigns responsibilities and defines how often the schedule is reviewed and updated.

This isn’t about software updates, holidays, or encryption alone—those are separate topics. A retention schedule focuses specifically on the lifecycle of information: how long to keep it, why, and how to dispose of it when the retention period ends.