Which of the following is NOT part of a retention policy?

A data retention policy formally defines the rules for keeping and disposing of information. It specifies the duration (how long to keep data), the format (to ensure long-term readability), and accessibility (who can access the archived data). Costs associated with storage and management are a business consideration and a budgetary input when creating and implementing the policy, but they are not an element defined within the policy document itself. The policy dictates requirements, not the financial expenditure to meet them.

A. Format: The policy must specify the data format to ensure it remains usable throughout its retention lifecycle, preventing obsolescence.
C. Accessibility: The policy must define access controls, specifying who is authorized to view, modify, or delete the retained data.
D. Duration: This is the most fundamental component of a retention policy, defining the specific period for which data must be kept.

1. ISO 15489-1:2016. Information and documentation — Records management — Part 1: Concepts and principles. Section 9.2, "Retention and disposition," outlines the need for policies to specify retention periods and disposition actions. It does not list cost as a policy component.

2. Hofmann, P., & Samp, C. (2014). Managing Information and Records. Facet Publishing. Chapter 5, "Retention Scheduling," details the components of a retention schedule, including record series, retention period, and disposition method. Financial costs are treated as an implementation factor, not a policy attribute.

3. University of California. (n.d.). UCOP Records Retention Schedule. UC Office of the President. This official university policy document provides examples of retention schedules that specify duration and disposition but do not include cost information within the schedule itself.