Certified Information Privacy Professional – Asia (CIPP/A) — Question 29

What does NOT need to be considered when determining the retention schedule for sensitive personal data?

Answer options

• A. Business needs.
• B. Amount of data.
• C. Storage capacity.
• D. Regulatory requirements.

Correct answer: C

Explanation

The correct answer is C, as storage capacity does not influence the retention schedule; it is more about how long data needs to be kept based on other factors. Business needs, amount of data, and regulatory requirements all play a crucial role in determining how long sensitive personal data should be retained.