// THREAT DETECTION AND DATA PRIVACY TERM
Data Retention
Data retention refers to the policies and practices an organization establishes for storing information for a specified period, often mandated by legal or regulatory requirements, before it is securely deleted or destroyed.
TECHNICAL DEFINITION
Data retention is a core component of data governance and information lifecycle management, outlining organizational policies and procedures for maintaining digital data storage for specific durations to meet regulatory compliance, legal discovery obligations, and operational requirements, typically culminating in secure data disposition.
BACKGROUND
The Utah Data Center (UDC), also known as the Intelligence Community Comprehensive National Cybersecurity Initiative Data Center, is a data storage facility for the United States Intelligence Community that is designed to store data estimated to be on the order of exabytes or larger. Its purpose is to support the Comprehensive National Cybersecurity Initiative (CNCI), though its precise mission is classified. The National Security Agency (NSA) leads operations at the facility as the executive agent for the Director of National Intelligence. It is located at Camp Williams near Bluffdale, Utah, between Utah Lake and Great Salt Lake and was completed in May 2014 at a cost of $1.5 billion.
READ MORE ON WIKIPEDIASYNONYMS & ALIASES
- Data storage policy
- Information retention
- Record retention schedule
- Data archiving policy
- Data holding period
USAGE NOTE
Proper data retention policies are critical for mitigating legal risks, reducing storage costs, and ensuring compliance with industry-specific regulations like GDPR, HIPAA, or CCPA.
DEVELOPERS
Organizations developing technology related to Data Retention.
Develops enterprise data management and protection solutions, including backup, recovery, and information governance tools essential for managing data retention policies, e-discovery, and compliance in cybersecurity and defense.
Provides a platform for security information and event management (SIEM) that collects, indexes, and analyzes machine-generated data from various sources, requiring robust data retention capabilities for security forensics, compliance, and threat intelligence.
Specializes in data security, governance, and compliance, offering platforms that help organizations monitor, protect, and manage sensitive data, including enforcing data retention policies to meet regulatory and security requirements.
Offers cloud-based security and compliance solutions for email, data, and social media, including advanced archiving and e-discovery tools critical for data retention to support legal, regulatory, and incident response needs in defense organizations.
Develops SIEM and log management solutions that enable organizations to collect, analyze, and retain vast quantities of security event data for extended periods, crucial for threat detection, incident response, and long-term compliance.
Provides data security, backup, and recovery solutions that focus on data immutability and ransomware recovery, with integrated data retention policies to ensure data availability and compliance for critical defense infrastructures.
Offers a comprehensive suite of cybersecurity products, including QRadar SIEM and data security solutions, which incorporate advanced data retention and governance capabilities to manage security logs and sensitive data for defense clients.