Q.Preeti celebrated her birthday with her family. She was excited to share the moments with her friend Himanshu. She uploaded selected images of her birthday party on a social networking site so that Himanshu can see them. After few days, Preeti had a fight with Himanshu. Next morning, she deleted her birthday photographs from that social networking site, so that Himanshu cannot access them. Later in the evening, to her surprise, she saw that one of the images which she had already deleted from the social networking site was available with their common friend Gayatri. She hurriedly enquired Gayatri “Where did you get this picture from?”. Gayatri replied “Himanshu forwarded this image few minutes back”.
Help Preeti to get answers for the following questions. Give justification for your answers so that Preeti can understand it clearly.

Data Retention: Keeping Information Alive (or Not)

Think about your phone's gallery. You take a photo today, but you don't delete it. A month later, it's still there. A year later, maybe you scroll past it. Now imagine you never deleted any photo for ten years — your phone would be full, slow, and you'd struggle to find the one picture you actually need.

That tension — between keeping information and letting it go — is the heart of data retention.

The Precise Meaning

Data retention is the practice of storing data for a specific period of time, after which it is either archived, deleted, or anonymised. It is not about hoarding everything forever. It is about deciding, in advance, how long each piece of data should live.

Every organisation — a bank, a hospital, a social media platform, a government — generates and collects data. Some of that data has legal value (tax records), some has operational value (customer orders), and some has no value after a few seconds (a temporary login session). Data retention policies are the rules that sort these out.

Why It Matters

Three forces drive data retention:

• Legal compliance: Tax authorities, labour laws, and sector-specific regulations (like those for banks or hospitals) mandate minimum retention periods. Failing to keep records long enough can result in fines or legal liability.
• Operational need: An e-commerce company needs order history to handle returns and warranty claims. A hospital needs patient records for ongoing treatment. Keeping data too short harms service.
• Privacy and security: Keeping data longer than necessary increases the risk of a data breach and violates privacy principles. Many privacy laws (like India's Digital Personal Data Protection Act) require that data be deleted once its purpose is fulfilled.

The Two Sides of the Same Coin

Data retention has a natural opposite: data deletion. A good retention policy is not just about what you keep, but also about what you throw away and when.

A Real-World Example (Without Numbers) …