In data lifecycle management, which component sets rules on data retention and deletion?

In data lifecycle management, which component sets rules on data retention and deletion?

• A. Data encryption standards.
• B. Governance and retention policies.
• C. Data backup schedules.
• D. Access control lists.

Answer: (B)

Data lifecycle management focuses on controlling data from creation through deletion. The rules governing how long data stays in storage and when it should be removed are set by governance and retention policies. These policies capture regulatory and business requirements, define retention periods, specify deletion procedures, and ensure consistent handling across systems and departments. By codifying these rules, organizations can remain compliant, avoid unnecessary storage costs, and reduce risk of keeping data longer than needed. While encryption standards protect data confidentiality, they do not determine retention. Backup schedules determine when copies are made and retained for recovery, not how long the original data must stay. Access control lists control who can view or modify data, not when the data should be kept or deleted.

Data lifecycle management focuses on controlling data from creation through deletion. The rules governing how long data stays in storage and when it should be removed are set by governance and retention policies. These policies capture regulatory and business requirements, define retention periods, specify deletion procedures, and ensure consistent handling across systems and departments. By codifying these rules, organizations can remain compliant, avoid unnecessary storage costs, and reduce risk of keeping data longer than needed. While encryption standards protect data confidentiality, they do not determine retention. Backup schedules determine when copies are made and retained for recovery, not how long the original data must stay. Access control lists control who can view or modify data, not when the data should be kept or deleted.