What is the recommended retention period for DEOCS data?

• A. Retention should comply with DoD privacy policies; store securely for the required period and then securely destroy.
• B. Store indefinitely.
• C. Retain for one year only.
• D. Destroy immediately after analysis.

Answer: (A)

The key idea is aligning DEOCS data retention with privacy protections and records management policy. Because DEOCS collects responses that can be sensitive or identifying, you must keep the data only as long as required by DoD privacy policies and the applicable records retention schedule, and then destroy it securely. This approach protects individuals’ privacy, reduces security risk, and ensures compliance with official guidance.

Storing indefinitely, retaining for a fixed short period like one year, or destroying immediately after analysis all fail to meet those policy-driven requirements. Following the prescribed retention period and securely destroying afterward is the responsible, compliant practice.