What's a Data Retention Policy & How Does it Affect SOC 2?

Quoted on this wiki

Every place a page here uses this source, in the order the words come in it.

1. What is a Data Retention Policy? “Specifically, it defines what types of data should be retained, how long the data should be retained and in what format, and the requirements and procedures to delete data when it is no longer needed.” Why Should I Have a Data Retention Policy?

   In Data retention

2. What is a Data Retention Policy? “Specifically, it defines what types of data should be retained, how long the data should be retained and in what format, and the requirements and procedures to delete data when it is no longer needed.” Why Should I Have a Data Retention Policy?

   In Prospect data retention periods

Quotes are verbatim and belong to their publishers. Where a quote has been translated, the original wording is kept below it.