Which of the following represents best practice for communicating data retention policies to stakeholders?

• A. Clearly convey policies and retention periods by data type and use cases across the organization.
• B. Hide retention details to avoid confusion.
• C. Retention policies should be kept in a technical appendix only.
• D. Only executives need to know retention periods.

Answer: (A)

When communicating data retention policies, you want people to understand what applies to their data and why. The best practice is to clearly convey policies and retention periods by data type and use cases across the organization. By tying rules to specific data categories and business contexts, stakeholders from legal, compliance, security, IT, and business units can see exactly what must be kept, for how long, and when it should be deleted. This clarity supports consistent implementation, reduces ambiguity, and makes audits and governance easier. To make this practical, provide plain-language summaries, data lifecycle visuals, and a centralized retention schedule that’s accessible to all relevant teams, with clear ownership and regular updates. Hiding details, restricting policies to a technical appendix, or assuming only executives need to know undermines transparency and leads to inconsistent practice.