Where does a data retention policy apply?

Scope

Locations

 

When you leave?

How immediate is it?

Who has access to data?