Which components define effective data retention and deletion for AI systems?

• A. Retention policies, secure deletion, data minimization, and audit trails
• B. Encryption at rest and TLS
• C. Backup frequency and storage tiering
• D. Data labeling standards

Answer: (A)

Effective data retention and deletion in AI systems hinges on setting clear retention policies, ensuring secure deletion, minimizing the data collected, and maintaining audit trails. Retention policies specify how long different data types are kept and when they should be purged, providing a structured timeline for data lifecycle management. Secure deletion ensures that data is actually unrecoverable when it's no longer needed, not just marked as deleted. Data minimization reduces the amount of data collected and stored in the first place, limiting the potential exposure and the duration of storage. Audit trails create a verifiable record of data handling, including collection, access, and deletion events, which supports compliance, accountability, and incident response.

Encryption at rest and TLS protect data in storage and in transit but don’t define how long data should be kept or guarantee its removal. Backup frequency and storage tiering influence availability and cost, not the deletion policies themselves. Data labeling standards relate to how data is annotated for training models, not to retention or deletion practices.