Abstract
Compliance with data retention laws and legislation is an important aspect of data management. As new laws governing personal data management are introduced (e.g., California Consumer Privacy Act enacted in 2020) and a greater emphasis is placed on enforcing data privacy law compliance, data retention support must be an inherent part of data management systems. However, relational databases do not currently offer functionality to enforce retention compliance.
In this paper, we propose a framework that integrates data retention support into any relational database. Using SQL-based mechanisms, our system supports an intuitive definition of data retention policies. We demonstrate that our approach meets the legal requirements of retention and can be implemented to transparently guarantee compliance. Our framework streamlines compliance support without requiring database schema changes, while incurring an average 6.7% overhead compared to the current state-of-the-art solution.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Admin\(\_\)task\(\_\)add procedure - schedule a new task. https://www.ibm.com/support/knowledgecenter/SSEPGG_11.1.0/com.ibm.db2.luw.sql.rtn.doc/doc/r0054371.html
Event scheduler. https://mariadb.com/kb/en/event-scheduler/
pg\(\_\)cron. https://github.com/citusdata/pg_cron
Scheduling jobs with oracle scheduler. https://docs.oracle.com/cd/E11882_01/server.112/e25494/scheduse.htm#ADMIN034
California consumer privacy act, July 2020. https://oag.ca.gov/privacy/ccpa
Ataullah, A.A., Aboulnaga, A., Tompa, F.W.: Records retention in relational database systems. In: Proceedings of the 17th ACM Conference on Information and Knowledge Management, pp. 873–882 (2008)
Congress, U.S.: 28 u.s. code §1732 (1948)
Hsu, W.W., Smith, A.J., Young, H.C.: Characteristics of production database workloads and the TPC benchmarks. IBM Syst. J. 40(3), 781–802 (2001)
IBM: Infosphere optim archive. https://www.ibm.com/products/infosphere-optim-archive
Lenard, B., Rasin, A., Scope, N., Wagner, J.: What is lurking in your backups? In: Jøsang, A., Futcher, L., Hagen, J. (eds.) SEC 2021. IAICT, vol. 625, pp. 401–415. Springer, Cham (2021). https://doi.org/10.1007/978-3-030-78120-0_26
Center for Medicare & Medicaid Services, et al.: The health insurance portability and accountability act of 1996, p. 158 (1996). http://www.cms.hhs.gov/hipaa
Oracle, September 2018. https://docs.oracle.com/goldengate/c1230/gg-winux/GGCON/introduction-oracle-goldengate.htm#GGCON-GUID-EF513E68-4237-4CB3-98B3-2E203A68CBD4
Wright State University: Retention guidelines for protected data (2020). https://www.libraries.wright.edu/special/recordsmanagement/retention
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2021 Springer Nature Switzerland AG
About this paper
Cite this paper
Scope, N., Rasin, A., Wagner, J., Lenard, B., Heart, K. (2021). Database Framework for Supporting Retention Policies. In: Strauss, C., Kotsis, G., Tjoa, A.M., Khalil, I. (eds) Database and Expert Systems Applications. DEXA 2021. Lecture Notes in Computer Science(), vol 12923. Springer, Cham. https://doi.org/10.1007/978-3-030-86472-9_21
Download citation
DOI: https://doi.org/10.1007/978-3-030-86472-9_21
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-86471-2
Online ISBN: 978-3-030-86472-9
eBook Packages: Computer ScienceComputer Science (R0)