The first step is to develop new control plans that include active expiration dates.
Your organization's plan-based on numerous laws, regulations, and guidelines-delineates the minimum amount of time data must be kept before it can be deleted using active expiration dates.