Retention obligations do not come from a single source: some are set by data protection law where an asset contains identifiable people, some come from contracts with photographers, agencies, or talent, and some are purely internal decisions about how long marketing creative stays relevant enough to be worth storing in the active library.<\/p>
The practical failure is applying one retention rule across an entire DAM instance rather than differentiating by asset class. A photo library holding both product shots with no personal-data implications and event photography with identifiable attendees needs different retention treatment for those two categories, but a single blanket policy configured at the system level cannot express that distinction unless the DAM supports rules scoped to metadata or asset type.<\/p>
Retention policy and asset lifecycle are related but not the same thing: the lifecycle describes the stages an asset moves through, while the retention policy is what sets the clock on how long it stays in each stage before the next transition \u2014 typically archiving or deletion \u2014 becomes mandatory rather than optional.<\/p>","protected":false},"excerpt":{"rendered":"
A retention policy specifies how long each class of asset must be kept before it can be archived or deleted, typically driven by legal, regulatory, or contractual requirements.<\/p>\n","protected":false},"author":0,"featured_media":0,"template":"","meta":{"footnotes":"","faq":[{"question":"What typically sets the retention period for a given asset class?","answer":"Legal, regulatory, or contractual requirements \u2014 such as data protection law for images containing identifiable people, or contract terms with photographers, agencies, or talent. The specific number often comes from the license or contract governing that asset class, such as a stock photo license versus a work-for-hire agreement, industry-specific regulatory requirements that tend to mandate longer minimums in fields like finance, healthcare, or clinical trials, or, absent an external mandate, internal company policy set by legal or compliance teams."},{"question":"Why is applying one blanket retention rule across an entire DAM a mistake?","answer":"Different asset classes carry different obligations \u2014 treating personal-data-containing photos and time-limited legal documents the same as evergreen marketing creative either over-retains data unnecessarily or deletes something a regulator later asks to see."},{"question":"What's the risk of over-retaining assets that contain identifiable people?","answer":"It's a genuine risk under privacy law, since data protection regulations often require deleting personal data once it's no longer needed for its original purpose. Holding onto photos or footage of identifiable individuals past that point creates unnecessary GDPR exposure \u2014 the organization is storing personal data without an active business justification, which increases both the scope of a potential data breach and the burden of responding to subject access or erasure requests."},{"question":"How is retention policy different from asset lifecycle?","answer":"The lifecycle describes the stages an asset moves through; the retention policy sets the clock on how long it stays in each stage before the next transition \u2014 typically archiving or deletion \u2014 becomes mandatory."},{"question":"What can trigger a retention period besides the asset's creation date?","answer":"A contract end date, a campaign end date, or a last-use date, depending on what the applicable retention obligation is actually tied to. A photographer or talent license may set the clock running from the contract's expiration rather than the shoot date, while a marketing asset might instead start counting from the day the campaign it supports ends, or from the last time the asset was actually accessed or used, not necessarily when it was first uploaded."},{"question":"What should happen at the end of a retention period?","answer":"Archive, delete, or flag the asset for legal review before deletion \u2014 the specific action depends on the policy and the asset class involved. Automatic deletion isn't the default outcome for every asset class: many organizations instead move the asset to cold storage, flag it for a manual review to confirm it's actually no longer needed, or route it through a legal check before deletion is finalized."}],"checked_date":"2026-08-11","sources":[],"kicker":"","fact_checker":0,"reading_time":0,"revisions":[],"seo_title":"Retention policy: how long to keep assets before deleting them","seo_description":"","noindex":false,"related":[2523,2576,2586,2410,2553,2551],"definition":"A retention policy specifies how long each class of asset must be kept before it can be archived or deleted, typically driven by legal, regulatory, or contractual requirements.","why":"Different asset classes carry different retention obligations \u2014 a contract or a clinical trial image might need to be kept for years under regulation, while a seasonal marketing banner has no such requirement \u2014 and treating them identically either over-retains data unnecessarily, a real risk under privacy law for assets containing identifiable people, or deletes something a regulator or counterparty later asks to see.","example_rows":[{"field":"Asset class","values":"Marketing creative, legal and compliance documents, personal-data-containing photos, financial disclosures"},{"field":"Retention trigger","values":"Creation date, contract end date, campaign end date, or last-use date"},{"field":"Required period","values":"Set by internal policy or by regulation, e.g. contractual term or statutory minimum"},{"field":"Action at end of period","values":"Archive, delete, or flag for legal review before deletion"}],"mistake":"Teams apply one blanket retention rule to the whole DAM library instead of setting it per asset class, so personal-data-containing images and time-limited legal documents end up governed by the same schedule as evergreen marketing creative.","deep_link":""},"silo":[24],"class_list":["post-2417","glossary","type-glossary","status-publish","hentry","silo-glossary"],"_links":{"self":[{"href":"https:\/\/picajet.com\/articles\/wp-json\/wp\/v2\/glossary\/2417","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/picajet.com\/articles\/wp-json\/wp\/v2\/glossary"}],"about":[{"href":"https:\/\/picajet.com\/articles\/wp-json\/wp\/v2\/types\/glossary"}],"version-history":[{"count":3,"href":"https:\/\/picajet.com\/articles\/wp-json\/wp\/v2\/glossary\/2417\/revisions"}],"predecessor-version":[{"id":3522,"href":"https:\/\/picajet.com\/articles\/wp-json\/wp\/v2\/glossary\/2417\/revisions\/3522"}],"wp:attachment":[{"href":"https:\/\/picajet.com\/articles\/wp-json\/wp\/v2\/media?parent=2417"}],"wp:term":[{"taxonomy":"silo","embeddable":true,"href":"https:\/\/picajet.com\/articles\/wp-json\/wp\/v2\/silo?post=2417"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}