Which statement best describes the purpose of data retention and deletion policies in CDX?

Which statement best describes the purpose of data retention and deletion policies in CDX?

• A. They govern how long data is kept
• B. They determine when data is deleted
• C. They ensure compliance, privacy, and cost control
• D. Policy governing how long data is kept and when it is deleted; ensures compliance, privacy, and cost control

Answer: (D)

Data retention and deletion policies define the lifecycle of information in CDX by stating both how long records are kept and when they are removed. This combination matters because it links storage duration to regulatory and legal requirements, protects privacy by ensuring data isn’t kept longer than necessary, and helps control costs by avoiding unnecessary storage and processing of old data. In CDX, having a policy that covers both the retention period and the deletion timing ensures you keep data long enough to meet business and compliance needs, while securely disposing of it when it’s no longer needed. The broader description—including both the duration and the timing, and the resulting benefits of compliance, privacy, and cost control—is why this option is the best fit. Other options that focus on only one aspect or only the purposes don’t capture the full lifecycle and its practical impact.

Data retention and deletion policies define the lifecycle of information in CDX by stating both how long records are kept and when they are removed. This combination matters because it links storage duration to regulatory and legal requirements, protects privacy by ensuring data isn’t kept longer than necessary, and helps control costs by avoiding unnecessary storage and processing of old data. In CDX, having a policy that covers both the retention period and the deletion timing ensures you keep data long enough to meet business and compliance needs, while securely disposing of it when it’s no longer needed. The broader description—including both the duration and the timing, and the resulting benefits of compliance, privacy, and cost control—is why this option is the best fit. Other options that focus on only one aspect or only the purposes don’t capture the full lifecycle and its practical impact.