Classify data and set retention / secure disposal.
What good looks like — maturity levels
How far up this ladder an organization goes depends on its size and the sensitivity of the data it handles.
Basic
Know what data you hold, and where
Standard
Classification + retention
Formal
DLP + secure disposal (lifecycle governance)
This library is general education, not advice about your specific organization. It describes what each control is and what strong practice looks like; whether and how any of it applies to you is your decision, in consultation with your carrier, broker, or counsel.