- Retention periods must be approved before publication and mapped to record type, lawful basis, business need, accounting need, dispute risk, security need, and regulatory obligation.
- Account profile and marketing data should be deleted or anonymized when no longer needed, subject to security, dispute, fraud, and legal-hold requirements.
- Financial, contribution, payment, billing, claim, payout, audit, tax, and dispute records may need to be retained longer than ordinary profile data to protect members, groups, FelbaCare, and lawful accountability.
- Backups should follow a defined deletion cycle. Legal holds suspend deletion for records relevant to an investigation, complaint, claim, regulator request, or litigation.
Data Retention and Deletion Policy
Retention criteria for accounts, groups, finance records, claims, uploads, logs, backups, and legal holds.