Jul 20, 2026retentionmedium
retention
Latest stance: indefinite or necessity based
“Retention. We generally retain personal information as long as necessary to fulfill the purposes for which it was collected, including to meet any legal, accounting, or reporting obligations, to initiate or defend legal claims, or to prevent fraud. In determining appropriate retention periods, we consider factors such as the volume, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure; the purposes for which we process the personal information and whether we can achieve those purposes by other means; and relevant legal requirements.”Open citation