Retention (pre-req for PCI)

Data retention policies in place as a prerequisite for PCI compliance.