How should TELUS manage data retention and deletion under TELUS policies?

• A. Keep all data indefinitely.
• B. Define retention periods, automated deletion, and compliance with regulatory requirements.
• C. Delete data only on manual request.
• D. Retention is optional.

Answer: (B)

Defining how long data should be kept, applying automated deletion, and ensuring compliance with regulatory requirements is the foundation of responsible data governance. This approach creates clear timelines for storing information based on its purpose and risk, while automation enforces those rules consistently, reducing human error and ensuring timely disposal. It also aligns with privacy and security expectations, meeting applicable laws and industry standards that specify data retention periods and deletion when no longer needed. Keeping data forever ignores necessity and creates avoidable risks, deleting only on manual request introduces inconsistency and delays, and treating retention as optional leaves the organization exposed to legal and policy breaches.