Before determining which data should be deleted during a data cleanup project, it is critical to first review retention schedules. Retention schedules specify how long data must be retained to comply with legal, regulatory, or business requirements. Deleting data prematurely could result in non- compliance or the loss of important information. By consulting retention schedules, the security administrator ensures that data is deleted in a compliant and controlled manner, based on its retention policy.