Which statement describes the purpose of data retention?

• A. The continued storage of an organization's data for compliance or business reasons
• B. The archival deletion of data after seven years
• C. The encryption of stored data
• D. The immediate disposal of non-critical data

Answer: (A)

Data retention is about how long an organization keeps its data and why. The purpose is to store data for a defined period to meet legal, regulatory, and business needs—such as supporting audits, regulatory reporting, investigations, and ongoing operations. Keeping data for compliance or business reasons fits this purpose, so the statement about the continued storage of data is the best match.

Archival deletion after a fixed period describes a specific disposal rule, not the general purpose of retention. Encryption concerns protecting data, not how long it is kept. Immediate disposal of non-critical data focuses on minimizing or deleting data, not on retaining it for required periods.