問題文
A property and casualty insurer holds 40 million closed claim records that carry policyholder names, national identifiers, and medical notes. Legal has agreed that claim detail may be kept only for a fixed number of years after a claim closes and must then be removed, but today nothing is ever deleted and administrators clean up only when storage alerts fire. Which design should the data architect adopt?
選択肢
- Copy the expired claims into a separate reporting object so the original records can stay untouched, and let the reports show only the current period while the full history remains available in the org for any later question the business might raise.
- Restrict the profiles that can view the sensitive fields on closed claims and leave the records in place, since data that nobody can read is no longer an exposure, and the storage alerts are handled by buying more storage.
- Ask the claim handlers to delete the records they no longer need at the end of each month, and publish a reminder of the retention period alongside the request.
- Assign a retention period to each category of claim data, then run a scheduled process that finds records whose period has expired, removes them, and records what was removed.