Skip to main content
All CollectionsControl Tests
Test: Data Retention Policy
Test: Data Retention Policy

Drata inspects your records to determine if a valid, approved Data Deletion Policy is in place with a data retention period specified.

Ashley Hyman avatar
Written by Ashley Hyman
Updated over a week ago

ASSOCIATED DRATA CONTROL

This test is part of the Data Retention control that ensures your company establishes written policies related to retention periods for the confidential information it maintains.

WHAT TO DO IF A TEST FAILS

If Drata finds that a Data Deletion policy either does not exist or has not been approved within the last 12 months the test will fail.

To remediate a failed test, you will need to either upload or build a Data Deletion policy within Drata or notify the owner to click 'Approve Policy' as soon as possible.

HELPFUL RESOURCES

Did this answer your question?