How should records be stored, retained, and disposed of according to SWLCAT policy?

• A. Store anywhere; retain indefinitely; dispose by trash bin.
• B. Store securely, retain for the mandated period, and dispose by approved methods (e.g., shredding or secure deletion) when no longer needed.
• C. Store only digitally; retain for 1 year; dispose via recycling.
• D. Store in personal devices; retain forever; dispose by burning.

Answer: (B)

Records should be kept in a secure, controlled way, kept for the retention period required by policy or law, and disposed of using approved methods when they’re no longer needed. This approach protects privacy, satisfies legal and policy obligations, and makes destruction verifiable. The best option follows that pattern by requiring secure storage, retention for the mandated period, and disposal through approved methods such as shredding or secure deletion. It also emphasizes that disposal isn’t by trash or casual means, which would risk data exposure. Other options fall short because they allow insecure storage locations, indefinite or inappropriate retention, or disposal methods that don’t guarantee data destruction or compliance.