Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue SI-12: SI-12 Information management and retention

The organisation manages and retains information in and output from the system according to applicable law, policy, standards and operational requirements. The GC discussion recalls the Privacy Regulations' two-year retention after the last administrative use and allows longer retention of aggregated data that cannot be re-identified. 3 enhancements.