Certified Information Privacy Technologist (CIPT) — Question 282

Which is NOT a suitable action to apply to data when the retention period ends?

Answer options

• A. Aggregation.
• B. De-identification.
• C. Deletion.
• D. Retagging.

Correct answer: D

Explanation

Retagging is not appropriate after the retention period has concluded because it implies that the data is still being managed, which contradicts the intention of data disposal. In contrast, aggregation, de-identification, and deletion are all valid actions that can be taken to handle data once it is no longer needed.