Data lifecycle

Data carries different risk at every stage, and the stage that gets least attention is the last one.

Collection, storage, use, sharing, archive, disposal. Enormous effort goes into protecting data in use and almost none into what happens when it is no longer needed, which is why organisations hold decades of records nobody has a reason for. Disposal is the cheapest risk reduction available and the least likely to be funded.