Which of the following statements BEST describes a data retention policy?

A data retention policy outlines the duration for which an organization will retain data. A clean desk policy involves the removal of sensitive documents that are not in use. Change management refers to a structured process for managing configuration changes, while a memorandum of understanding comprises legal documents that delineate a mutual agreement between two parties.