Data Retention is how long organizations keep personal data before deleting it.

Key Points:
1) Keep only as needed
2) Define retention periods
3) Secure deletion required.

 A bank keeps records for 7 years before deletion, often managed by a Data Processor.