A data retention policy is a formalized protocol for retaining information, and historically companies have enacted them for regulatory compliance.

Now that companies regularly use consumer and other sources of data, they are building more protective policies.

Regulatory frameworks such as the General Data Protection Regulation and the California Consumer Privacy Act both compel companies to update their policies.