How long an organization keeps data before deleting it, usually set by legal, regulatory, or business need.