What does DM-2 Data Retentions and Disposal support require?

• A. NARA provides retention schedules that governs the disposition of federal records; program official coordinates with records officers and with NARA to identify appropriate retention periods and disposal methods
• B. The organization minimizes PII collection
• C. The org inventories PII
• D. The org responds to privacy incidents

Answer: (A)

DM-2 focuses on aligning data retention and disposal with federal records management requirements. NARA provides the official retention schedules that specify how long different federal records must be kept and how they should be disposed of. The program official must coordinate with records officers and with NARA to identify the appropriate retention periods for each record type and choose disposal methods that securely and properly destroy records when those periods end. This coordination ensures compliance with laws and agency policies, prevents keeping records longer than necessary, and guarantees proper disposal to protect sensitive information. While other privacy-related activities like minimizing PII collection, inventorying PII, or incident response are important, they do not address the requirement to follow retention schedules and coordinate for retention and disposal.