Obligation guide
What Are AI Data Retention Rules?
Required by 3 regulations across 3 jurisdictions in the XIRA catalog (state, federal, and local codes).
Definition
Data retention rules cap how long interview recordings, model inputs, or candidate artifacts may live in storage. They reduce harm if data leaks and signal good faith to regulators.
See also our AI compliance glossary for short definitions of common terms.
Related glossary entries
Which regulations require this
- Texas TRAIGA Biometric and AI Training Amendments (HB 149, 89th Legislature)
Amends the Texas Capture or Use of Biometric Identifier Act (CUBI) and related Business and Commerce Code provisions...
TXAI-specificMediumIn effect - Utah AI Mental Health Chatbot Regulation (HB 452)
Regulates AI-powered mental health chatbots. Requires clear disclosure that the service is not a human clinician, lim...
UTAI-specificMediumIn effect - Illinois AI Video Interview Act (820 ILCS 42)
Requires employers using AI to analyze video interviews to notify candidates, explain how AI is used, and obtain cons...
ILAI-specificLowIn effect
Which states reference this obligation
What you should do next
- Set default retention windows per data category with legal sign-off.
- Automate deletion jobs and monitor for stuck backups or exports.
- Document exceptions, such as litigation holds, with owners and end dates.
- Validate vendors purge replicas under the same schedule.
- Review retention after acquisitions when duplicate datasets appear.
Check if this applies to your company
The free scan maps obligations to your states, tools, and role.
Start your free scan