Cybersecurity Glossary
Data Retention
Deciding how long you keep information, and deleting it when that period ends.
What Data Retention means
Retention rules balance legal obligations, business need and risk. Data protection law generally requires that personal data is not kept longer than necessary. Retention is easiest to enforce when it is automated in the platform rather than left to individual judgement.
Why Data Retention matters for small businesses and nonprofits
Data you no longer hold cannot be stolen. Old mailboxes, former client files and abandoned shared drives are frequently the most sensitive material in a breach, and almost never the material anyone still needs.
What to do about Data Retention
- Write down a retention period for each category of data and the legal reason for it
- Automate deletion in the platform where you can
- Include departed staff mailboxes and old project shares in the scope
Not sure where you stand on this?
We review your current setup against the basics, tell you plainly what is covered and what is not, and give you a ranked list with effort and cost. No jargon and no scare tactics.