Which of the following categories should document controls relating to periods of retention for personal data?

An organization is creating a personal data processing register to document actions taken with personal data.

Which of the following categories should document controls relating to periods of retention for personal data?
A . Data archiving
B . Data storage
C . Data acquisition
D . Data input

View Answer

Answer: A

Explanation:

However, the risks associated with long-term retention have compelled organizations to consider alternatives; one is data archival, the process of preparing data for long-term storage. When organizations are bound by specific laws to retain data for many years, archival provides a viable opportunity to remove data from online transaction systems to other systems or media.

Data archiving is the process of moving data that is no longer actively used to a separate storage device for long-term retention. Data archiving helps to reduce the cost and complexity of data storage, improve the performance and availability of data systems, and comply with data retention policies and regulations. Data archiving should document controls relating to periods of retention for personal data, such as the criteria for determining the retention period, the procedures for deleting or anonymizing data after the retention period expires, and the mechanisms for ensuring the integrity and security of archived data.

Reference: CDPSE Review Manual (Digital Version), page 123