https://igguru.net/2020/01/07/record-retention-a-key-component-of-privacy-and-cyber-compliance-program-via-bn-blogs/