Example
An employer assigns different retention periods to payroll records and unsuccessful applications, with a process to review exceptions such as a legal hold.
What to keep in mind
Keeping everything indefinitely increases risk and may breach privacy requirements. Record the reason for each period and ensure backups, suppliers and connected systems are considered in deletion arrangements.