Exam CIPM All QuestionsBrowse all questions from this exam
Question 125

Which of the following is NOT an important factor to consider when developing a data retention policy?

    Correct Answer: C

    When developing a data retention policy, the primary factors to consider are business requirements, compliance requirements, and technology resources. Business requirements ensure that data is available for operational and strategic purposes, compliance requirements ensure adherence to legal and regulatory standards, and technology resources ensure that the infrastructure can support the required data storage and management. Organizational culture, while influencing policy enforcement and acceptance, is not a critical factor in determining the specifics of a data retention policy.

Discussion
SsouravOption: A

A. Technology resource. While technology resources play a role in data storage, archiving, and management, they are not a foundational factor when determining how long data should be retained. Data retention policies are primarily developed based on business requirements, compliance/legal requirements, and sometimes, organizational culture (as it might influence how an organization values data privacy and protection).

MaritzTeeOption: C

C. Organizational culture. While organizational culture can influence how policies are perceived and implemented, it is not a critical factor in determining the specifics of a data retention policy. The main factors that should drive the development of a data retention policy include: Technology resource: Ensuring that the organization has the necessary infrastructure to store and manage data securely over its retention period. Business requirement: Aligning the retention policy with business needs to ensure that data is available for operational, analytical, and strategic purposes as required. Compliance requirement: Adhering to legal and regulatory requirements that dictate minimum and maximum retention periods for different types of data. Organizational culture may impact how policies are enforced and accepted by employees, but it does not fundamentally dictate the parameters of data retention policies themselves.

thecheaterzOption: A

I vote A. Data retention schedules are decided by the business and culture is a legitimate consideration. The technology resource doesn't matter.

1054895167Option: C

should be C

carlosbuiOption: A

should be A

[Removed]Option: C

Should be C

Alex951Option: C

Should be C

DracoLOption: C

I go for C

FSampaioOption: C

Letter C is right.

BoerenkoolOption: C

Why not C?