The instruction by the legal department to store data from the affected virtual machines for a minimum of one year is an example of data Retention. Retention policies are often driven by regulatory compliance requirements and dictate how long certain types of data must be kept before they can be securely disposed of. Reference: CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson