Policies related to the short- and long-term storage of data, often for legal or record-keeping purposes, particularly business records that may involve personal or confidential data of clients or customers. A company’s data retention policy should clearly state which data is being stored, for how long, and for what purpose.