A policy dictating how long data should be kept before it should be disposed. In US, medical data should be kept atleast 6 years.