Data Retention and Disposal is an essential component of responsible data lifecycle management. Data should not be retained longer than necessary unless legal, regulatory, operational, or other approved requirements justify continued retention.
The Data Office works with relevant University units to promote practices that define appropriate retention periods and ensure the secure disposal of data and records when they are no longer required, taking into account the nature, classification, and applicable requirements of the data.
Retention & Disposal Objectives
- Retain data only for the required period.
- Meet legal, regulatory, and operational requirements.
- Reduce risks associated with unnecessary data retention.
- Optimize storage and related resources.
- Ensure secure disposal when the retention period ends.
- Preserve confidentiality throughout the disposal process.
Data Lifecycle
Retention requirements should be considered throughout the lifecycle of data, including:
- Data creation or collection.
- Data use and processing.
- Storage and archiving.
- Periodic review of the need for continued retention.
- Secure disposal when retention is no longer required.
Secure Disposal
Data should be disposed of using methods appropriate to its nature, storage medium, and classification level, ensuring that disposed data cannot be recovered or used without authorization where secure destruction is required.Data Retention and Disposal is an essential component of responsible data lifecycle management. Data should not be retained longer than necessary unless legal, regulatory, operational, or other approved requirements justify continued retention.
The Data Office works with relevant University units to promote practices that define appropriate retention periods and ensure the secure disposal of data and records when they are no longer required, taking into account the nature, classification, and applicable requirements of the data.
Retention & Disposal Objectives
- Retain data only for the required period.
- Meet legal, regulatory, and operational requirements.
- Reduce risks associated with unnecessary data retention.
- Optimize storage and related resources.
- Ensure secure disposal when the retention period ends.
- Preserve confidentiality throughout the disposal process.
Data Lifecycle
Retention requirements should be considered throughout the lifecycle of data, including:
- Data creation or collection.
- Data use and processing.
- Storage and archiving.
- Periodic review of the need for continued retention.
- Secure disposal when retention is no longer required.
Secure Disposal
Data should be disposed of using methods appropriate to its nature, storage medium, and classification level, ensuring that disposed data cannot be recovered or used without authorization where secure destruction is required.