Policies and procedures for storing and deleting data in accordance with legal and regulatory requirements.