Which aspect of data management is critical for compliance with regulations like GDPR?

• A. Data collection methods
• B. Data monetization
• C. Data retention and destruction policies
• D. Data visualization techniques

Answer: (C)

Data retention and destruction policies are critical for compliance with regulations like GDPR because these policies dictate how long personal data can be retained and the processes for securely deleting this data once it is no longer needed. GDPR emphasizes the principle of data minimization, which states that organizations should only collect and retain data that is necessary for the specified purpose.

Under GDPR, organizations are required to clearly define data retention periods and to ensure that personal data is deleted securely and permanently when it is no longer necessary for the purposes for which it was collected. These policies not only help mitigate risks associated with data breaches but also ensure that organizations are operating within legal frameworks, thereby avoiding potential fines and penalties associated with non-compliance.

While data collection methods, data monetization, and data visualization techniques are important aspects of data management, they do not directly address the requirements of data retention and destruction as stipulated by regulations like GDPR. Data collection methods focus on how data is obtained; data monetization relates to generating revenue from data, and data visualization deals with presenting data in an understandable format. None of these aspects inherently ensure compliance with data protection laws regarding how long data can be stored and the processes for its disposal.