Data retention is defined as what concept?

• A. Archiving data to cold storage
• B. The continued storage of an organization's data for compliance or business reasons
• C. Encrypting all data
• D. The automatic deletion of data after a fixed period

Answer: (B)

Data retention is the practice of keeping data for defined periods to satisfy legal, regulatory, or business needs. It focuses on how long information should be stored, where it resides, and when it can be disposed of. The best choice captures this ongoing storage for compliance or business reasons, which is the core purpose of retention. Archiving data to cold storage is a related tactic for managing retention, but it’s a storage method rather than the concept itself. Encrypting data concerns protecting confidentiality, not how long data is kept. Automatic deletion after a fixed period describes removal and disposal, the opposite of retention.