Question

A retailer's data warehouse retains customer purchase histories indefinitely because a retention schedule was defined in policy but never enforced technically. During a data privacy review, the engineer confirms records exist that are well past the stated 5-year retention period for marketing analytics. Which action MOST effectively closes this gap in the data life cycle?

Accepted Answer

Implement automated retention rules in the warehouse that trigger secure deletion or de-identification when records exceed the defined retention period

Answer

Update the privacy notice to disclose that purchase histories may be retained indefinitely for analytics

Answer

Encrypt the aged records at rest so they remain protected until a manual review can be scheduled

Answer

Move the aged records to lower-cost cold storage to reduce the operational burden of retaining them