Microsoft 365 FundamentalsDescribe security, compliance, privacy, and trust in Microsoft 365Medium
A healthcare organization stores patient records in Microsoft 365. Due to strict regulatory requirements, these records must be retained for a minimum of 10 years and then permanently deleted. Which Microsoft 365 compliance feature is best suited to automatically enforce both the retention and deletion policies for this sensitive data?
- AData Loss Prevention (DLP) policies
- BRetention policies and labels
- CInformation Barriers
- DMicrosoft Purview eDiscovery
Show answer & explanationAnswer & explanation
Correct answer: B. Retention policies and labels
Retention policies and labels in Microsoft 365 allow organizations to define how long data should be kept and, optionally, when it should be automatically deleted. This directly addresses the requirement for both minimum retention and eventual permanent deletion of patient records.
Why the other options are wrong
- A. DLP policies prevent data from leaving the organization, they don't manage its lifecycle.
- C. Information Barriers prevent communication between specific user groups, unrelated to data retention.
- D. eDiscovery is for legal holds and searching, not automated retention/deletion.
Retention Policies and Labels
Microsoft 365 features that allow organizations to manage the lifecycle of data by defining how long content is retained and when it is permanently deleted, ensuring compliance with regulatory requirements.
- Applies to various Microsoft 365 services (Exchange, SharePoint, Teams).
- Can be applied automatically or manually.
- Supports both retaining and deleting content.
Memory trick: Retain and Delete with Labels, keeping data safe and tidy.