Term: Retention

Retention refers to how long personal data should be kept by an organization before it is deleted or destroyed. Data controllers must establish and follow retention policies and schedules that are based on the purpose for which the personal data was collected.