Research Note

Information Retention and Deletion Rules

Updated Jun 17, 2026
Read 01 min read
Status reviewed

Use this template to define retention periods, deletion triggers, deletion methods, and evidence requirements by information type.

On this page

When to use this

Use this template to define retention periods, deletion triggers, deletion methods, and evidence requirements by information type.

Rules matrix

Information type	Owner	Retention period	Legal/regulatory basis	Deletion trigger	Deletion method	Evidence required
TBD	TBD	TBD	TBD	TBD	TBD	TBD

Minimum checks

Information type is linked to an owner.
Retention period is justified.
Deletion trigger is clear.
Deletion method matches sensitivity.
Backup/cloud handling is included where relevant.

Template
Iso27001
Technological controls
Retention
Information deletion

Note Metadata

Aliases: Retention and Deletion Matrix

Source: 90 Templates/Information Retention and Deletion Rules.md