Question

A retailer's automated retention schedule is set to delete customer transaction records 24 months after the last purchase, aligned to the stated marketing purpose. The legal department notifies the privacy team that a subset of these records is subject to an active litigation hold and must be preserved indefinitely until the matter concludes. What is the MOST appropriate action for the privacy engineer to take?

Accepted Answer

Suspend automated deletion only for the records covered by the legal hold, documenting the exception, while continuing scheduled disposal of all other records

Answer

Pause the entire automated retention job for all customer transaction records until the litigation is resolved

Answer

Allow the automated deletion to proceed as scheduled because the defined retention period has governed the data since collection

Answer

Anonymize the records under legal hold so they can be retained indefinitely without violating retention limitation