Which factor is NOT typically considered when determining data retention periods in FOSSE?

• A. Regulatory Requirements
• B. Business Needs
• C. Data Format Standards
• D. Data Privacy

Answer: (C)

Data retention periods are guided by what laws require, how long the data remains useful for business operations, and privacy considerations that limit how long personal data can be stored. Regulatory requirements set mandatory durations or minimums for keeping records. Business needs determine if data is needed for analytics, audits, or ongoing processes. Data privacy influences retention to minimize risk and comply with user rights and data minimization principles. Data format standards, while important for how data is stored and exchanged, don’t dictate how long data should be kept; they affect representation and interoperability, not duration. So the factor not typically used to set retention periods is data format standards.