====== Data Disposition ======

[[public:99_annexes:annex-b-terms-and-definitions:start|Go to Terms and Definitions]]

===== Discussion =====

Data Disposition is the governed action that determines the final handling of [[public:99_annexes:annex-b-terms-and-definitions:m:managed_data|Managed Data]] when continued [[public:99_annexes:annex-b-terms-and-definitions:d:data_retention|Data Retention]] is no longer required or authorized.

Disposition may include destruction, permanent preservation, transfer of custody, return to a provider, anonymization, or another action authorized by applicable Requirements, Policies, Constraints, Classifications, legal obligations, contractual obligations, or decisions of an [[public:99_annexes:annex-b-terms-and-definitions:a:authority|Authority]].

Data Disposition remains distinct from expiration. Expiration identifies that a retention period or condition has ended. Disposition identifies and performs the authorized action that follows.

===== Definition =====

//governed final handling of data when continued retention is no longer required or authorized//

===== Source =====

Dido Solutions, Inc. and Jackrabbit Consulting, Inc., derived for DIDO-TE and informed by records-disposition concepts used by the U.S. National Archives and Records Administration

===== Note =====

Disposition does not necessarily mean destruction. The governing requirement may direct permanent preservation or transfer of custody.

A Data Disposition record should identify the affected Data, applicable authorization, action performed, time, actor, outcome, and relationship to the governing retention requirement.

===== Example =====

After the required retention period ends, an authorized disposition activity destroys temporary Test Input copies while transferring the authoritative Test Results and Evidence to permanent archival custody.

----

<WRAP centeralign>
© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
</WRAP>