Certified Data Privacy Solutions Engineer (CDPSE) — Question 137

Which of the following is MOST important when creating a data retention policy?

Answer options

• A. Requesting and obtaining board approval
• B. Identifying and classifying information assets
• C. Reviewing and updating current procedures
• D. Identifying and scoping regulatory requirements

Correct answer: D

Explanation

Identifying and scoping regulatory requirements is vital because it ensures that the data retention policy complies with legal obligations. The other options, while important, do not directly address the regulatory frameworks that dictate how long certain types of data must be retained or discarded.