Which term corresponds to the description: maintains and controls certain data in order to comply with business policies and applicable laws and regulations?

Which term corresponds to the description: maintains and controls certain data in order to comply with business policies and applicable laws and regulations?

• A. Data Preservation
• B. Data Retention
• C. Short-Term Retention
• D. Data in Use/Data in Processing

Answer: (D)

Managing data during active processing is about enforcing policies and controls while data is being used by apps and systems. When data is in use, it is in transit through software, memory, and processors, so access controls, authentication, and auditing must continuously apply to ensure compliance with laws and business rules. This is the stage where sensitive data is most at risk of exposure if not properly governed, so the focus is on how data is handled during processing, who can access it, and how actions are recorded.

Data that’s kept for a certain period falls under retention planning, which centers on how long data should be kept and when it should be deleted to meet regulatory and policy requirements. Preservation concerns preserving data for legal hold or investigations, often regardless of routine retention schedules. Short-term retention is a subset of retention tied to a brief retention window. These concepts are about storage timelines and preservation, not the ongoing processing controls that characterize data in use.