Sometimes, securing data means that the data should be removed. When data is no longer required, it typically depends on the type of data, its operational context, its level of security, and any laws or regulations that require certain handling or retention. The following table shows examples of some generic data retention policy items and their retention periods:
|
Category |
Item |
Retention period |
Retirement date |
Disposal method |
|
Organization records |
IRS form 1023 |
Permanent |
N/A |
N/A |
|
Financial records |
Financial statements |
Permanent |
N/A |
N/A |
|
Financial records |
Bank deposit |
7 years |
1/1/2024 |
Shred |
|
Tax records |
Payroll tax withholdings—2015 |
7 years |
4/30/2022 |
Burn |
|
Personnel records |
I-9 forms |
5 years after termination |
Varies |
Shred |
|
Computer-based correspondence |
Internal E-mail |
12... |