Use when creating or auditing a data retention policy that balances legal obligations, business needs, and privacy requirements