An Agency Has Implemented a Data Retention Policy That Requires

Multiple Choice

An agency has implemented a data retention policy that requires tagging data according to type before storing it in the data repository. The policy requires all business emails be automatically deleted after two years. During an open records investigation, information was found on an employee's work computer concerning a conversation that occurred three years prior and proved damaging to the agency's reputation. Which of the following MOST likely caused the data leak?

A) The employee manually changed the email client retention settings to prevent deletion of emails
B) The file that contained the damaging information was mistagged and retained on the server for longer than it should have been
C) The email was encrypted and an exception was put in place via the data classification application
D) The employee saved a file on the computer's hard drive that contained archives of emails, which were more than two years old